One of my kids is disabling Norton Online monitoring and I don't know how

I see numerous messages on this topic. My question: if my kid does not have administrative privileges for his computer login, it is safe to assume the "XXXXX has disabled Norton Safety Minder" messages are "false alarms", and the monitoring activity is still taking place after I receive this e-mail alert?

 

If I change from monitor mode to restrict access to certain sites mode, would the restrictions remain in effect even if I get this message? (Again, assuming no access to administrative login and kid didn't crack my password:-)