[Sarepean]

The status and user access is controlled by MySQL since it's in the database. He may be accessing root on MySQL and may have run an SQL update.

Go into MySQL and lower his access to like 0 or something.