If he has Windows XP, did he install the patch from an account with administrative privileges?