I want to lock functions on the XBOX One, it works wonderfully too.
But how do I prevent a new account from being created on the console that the restrictions do not apply to?
You can set a password which is requested every time the console is started before logging in.
But don't ask how, luckily I don't have to deal with that privately.