How to secure windows user accounts from unauthorised access

Summary

This guide helps you troubleshoot and resolve: How to secure windows user accounts from unauthorised access. Follow the steps below to fix the issue.

Common Causes

Securing user accounts is one of the most effective ways to protect your Windows 10 or 11 computer from unauthorised access. By separating administrative privileges from daily tasks and using strong authentication, small businesses and home office users can significantly reduce the risk of malware infections and data breaches.

Understanding Account Types

Windows provides two primary account types for local users:

• Administrator: Has full control over the system, including the ability to install software, change security settings, and access all files.
• Standard User: Can run most applications and change personal settings, but cannot make system-wide changes that affect other users or security.

Quick Fix Steps

1. Review all existing user accounts on the device.
2. Downgrade any unnecessary accounts from Administrator to Standard User.
3. Ensure every account is protected by a strong, unique password.
4. Enable Windows Hello or multi-factor authentication where available.

Detailed Instructions

Creating a New User Account

1. Click the Start button and select Settings.
2. Navigate to Accounts > Family & other users (Windows 10) or Other users (Windows 11).
3. Click Add account or Add someone else to this PC.
4. Choose whether to add a Microsoft account (using an email address) or a local account (without an email).
5. Follow the on-screen prompts to set a username and password.

Changing an Account to Standard User

1. Open Settings and go to Accounts.
2. Select Family & other users or Other users.
3. Click on the account you wish to modify and select Change account type.
4. Under Account type, select Standard User from the dropdown menu.
5. Click OK to save the changes.

Setting a Strong Password

A strong password is your first line of defence against unauthorised access. Follow these guidelines:

• Use at least 12 characters.
• Include a mix of uppercase and lowercase letters, numbers, and symbols.
• Avoid using common words, names, or birthdays.
• Use a unique password for every account and device.

To change a password:

1. Press Ctrl + Alt + Delete on your keyboard.
2. Select Change a password.
3. Enter your current password, then enter and confirm your new password.
4. Press Enter or click the arrow to confirm.

Enabling Windows Hello

Windows Hello provides a more secure way to sign in using facial recognition, a fingerprint, or a PIN.

1. Open Settings and go to Accounts.
2. Select Sign-in options.
3. Choose your preferred method, such as Facial recognition, Fingerprint recognition, or PIN (Windows Hello).
4. Click Set up and follow the prompts to complete configuration.

Additional Security Best Practices

• Keep Windows updated to ensure you have the latest security patches.
• Enable Dynamic Lock to automatically lock your PC when your paired phone moves out of range.
• Require a sign-in whenever the system wakes from sleep.
• Regularly review the list of user accounts to remove old or unused profiles.

For more information on securing your Windows environment, see our guide on Windows 11 Security Best Practices or Managing User Accounts in Windows 11.

If you need assistance securing your business devices, Open a Ticket and our Brisbane support team will help you implement the right protections.

Still Having Issues?