In Windows 10 or 11 the user can be linked to a Microsoft account, so as to obtain some advantages such as protection with encrypted authentication and control of account activity from another PC. But if we wanted to create new limited accounts to be assigned to a relative, friend or when we share the workstation with another colleague, what can we do?
In the following guide we will show you how to create user accounts on windows and how to manage it to always obtain maximum safety. In support of the guide on creating accounts, we will also see a small tool that allows you to configure security settings and permissions with greater simplicity.
READ ALSO: How to activate and create a Guest account
1) Why have multiple accounts on your PC
Having multiple accounts registered on your Windows computer allows you to differentiate activities, documents, files and programs for various users who can use the PC. For example, at home, very often you have a computer that is used by the whole family: instead of accessing everyone with a single account and sharing the document folders and the desktop it is better to create an account for each family member or for each computer user, as everyone can use the computer as they want without the possibility of being able to do damage (because without administrator rights), with the possibility of being able to organize programs, files and desktops as you prefer and protect access to some private files.
In addition, having your own personal account on Windows allows you to browse the Internet privately with your favorite browser without risking that others can spy on the sites you visit.
2) Manage user accounts on Windows Pro
Per see active accounts on Windows Professional, we open the Start menu, we look for the app Run (or press Windows + R on the keyboard) and type the command lusrmgr.msc.
All users on the PC will appear, even those currently hidden (not visible); the latter are indicated with a down arrow symbol. To add new ones just right click in the folder Users and select the item New user.
As explained in another related guide on how to secure guest and administrator accounts, it pays off disable Guest because it is never used anyway. The Administrator account is disabled by default, we can use the methods described above to verify it.
Those who know how to use the computer can add their user account to the group Administrators. To add a user to a group, from the properties tab, just click on the item Member of, press on Add -> Advanced -> Find -> administrators.
3) Manage user accounts on Windows Home and Pro
If we use Windows 10 or 11 in the Home version we can manage users by taking us on the path Settings -> Account -> Family and other users.
In the screen that opens, we can add new family members (which will also be added to any Microsoft account configured) or add strangers, so as not to find them as relatives in the account.
As an alternative to this screen, we can check active users and add new ones by taking us along the path Control Panel -> User Accounts -> User Accounts -> Manage another account.
To add more users just click on the button Add a new user in the PC settings.
4) User account security
To increase the security of your personal account we strongly recommend set an access password, even those disabled (because a virus could enable them and if they have no passwords they become open doors to take control of the PC).
To change the local password (without being connected to a Microsoft account) let’s take the path Settings -> Accounts -> Login options and choosing the password to use on the login screen. If you prefer a simpler configuration screen, the only one available in Windows Home version, you can use the users screen accessible from the Control Panel or by typing in Run the command control.exe userpasswords.
Alternatively we can change the password (or set a new one) also from the Command Prompt, using the command:
net user nome_utente password
Where instead of username we need to enter the account name.
If we have a Microsoft account connected to Windows 10 or Windows 11 it will not be possible to change the password without going through the Microsoft site, but we can increase the security by taking us in the path Settings -> Accounts -> Login options and enabling the PIN or fingerprint, so that we can quickly access our account without having to type in the Microsoft password each time (however available as a secondary access method).
5) Disable Administrator account
The administrator account might be useful in an emergency, but in normal scenarios it is best to leave it disabled. To disable the administrator account in these versions of Windows, you need to open a command prompt from the Start menu and type the command:
net user administrator /active:no
We will then have disabled the administrator and prevented viruses from using it to damage the computer.
READ ALSO: How to activate the administrator account in Windows 10 and 11
6) User management program
To manage Windows accounts and to make them safe you can use them a program which facilitates these operations and allows you to configure permissions quickly as Accounts Tuner. This program can be used by computer administrators for modify the local and remote user security settings.
Without going into the local or group security policies, you can see all the information directly from the Accounts Tuner synthetic interface.
From a drop-down menu you can select the permissions for each user, even for other computers connected to the network.
The parameters include the following options:
- Disable an account
- Block an Account temporarily after a certain number of failed login attempts
- Password expiration
- Password required
- Change password after x days
The main interface allows you to select the user profile you want to modify and also shows usage statistics over time.
With the information provided we will be able to create new accounts with great ease on Windows 10 and Windows 11, ie the most recent operating systems released by Microsoft. In most cases, all we need to do is get a Microsoft account and associate it with our user, so that we can get the highest level of protection.
If we don’t have a Microsoft account it will still be possible to use a local account with a password, but this password will not protect against programs and tools designed for recovering Windows passwords. These tools are useless with Microsoft accounts, one more reason to use them instead of the local account. Ideally we can too create a secure account to prevent any viruses or problems.
Still on the subject of safety, we can also improve the management of permissions to read and modify files and folders for accounts, so as to prevent access to some protected folders.
READ ALSO: Become a Windows administrator on any PC before booting