My father (85) similar scenario falling for scam emails and phone calls. Walked in on him installing rdp software as the "Microsoft support tech" instructed him to do when he called the number in the email that told him he had a virus.
Changed his desktop pc so his account is no longer admim (can't install software). Additionally, the websites he can visit are now allow-list only with everything else blocked.
Changed his desktop pc so his account is no longer admim (can't install software). Additionally, the websites he can visit are now allow-list only with everything else blocked.