How to set up and use a local administrator account vs standard user account on Windows for better security

Summary

This guide helps you troubleshoot and resolve: How to set up and use a local administrator account vs standard user account on Windows for better security. Follow the steps below to fix the issue.

Common Causes

Running your computer as a standard user for everyday tasks and only switching to an administrator account when you need to install software or change system settings is one of the simplest and most effective ways to improve your security posture. This approach limits what malware can do if it ever gets onto your machine and helps prevent accidental changes that can break your system. This guide walks you through setting up both account types on Windows 10 and Windows 11.

Why Use Separate Accounts?

When you log in with an administrator account, any program you run (including malicious software) also has full access to your system. By contrast, a standard user account can only make changes that affect your personal files, not the operating system itself. If something does go wrong, the damage is contained.

Check Your Current Account Type

Before making any changes, find out whether the account you are currently using is an administrator or standard user.

1. Press Win + I to open Settings.
2. Click Accounts.
3. Select Your info (Windows 10) or look under Account settings (Windows 11).
4. Your account type is displayed beneath your name, for example "Administrator" or "Standard user".

Create a New Local Administrator Account

You will need at least one administrator account on the machine. If your current account is the only one and it is a standard account, create an admin account first.

1. Open Settings with Win + I.
2. Go to Accounts then Family & other users (Windows 10) or Other users (Windows 11).
3. Click Add other user or Add account.
4. Choose I don't have this person's sign-in information, then Add a user without a Microsoft account.
5. Enter a username and a strong password. Make the password hint something only you would understand.
6. Click Next to finish creating the account.
7. Back in the user list, click the new account and choose Change account type.
8. Set the dropdown to Administrator and click OK.

Create a Standard User Account for Daily Use

Follow the same steps as above, but when you reach Change account type, leave the dropdown set to Standard user. Use this account for browsing the web, checking email, opening documents, and other everyday tasks.

Switch to the Standard Account

1. Click the Start button and click your profile icon.
2. Select Sign out.
3. At the lock screen, choose your new standard user account and sign in with its password.

Best Practices for Day-to-Day Use

• Browse, email, and work from the standard account. Reserve the administrator account for installing software, updating drivers, and changing system settings.
• Use unique, strong passwords for each account. A password manager makes this easy.
• Don't share the administrator password across multiple users. Each person who needs admin access should have their own administrator account.
• Review accounts regularly. Remove any old accounts that are no longer needed through Settings > Accounts > Other users.
• Keep both accounts updated. Windows updates apply to all users, but you should still check for updates regularly while signed into each account.

Troubleshooting

I cannot install software from my standard account

This is expected behaviour. When prompted, enter the username and password of your administrator account to authorise the installation. You can then continue using the standard account.

The "Change account type" option is greyed out

You must be signed in as an administrator to change another account's type. Sign in to your administrator account and try again.

I forgot my administrator password

Refer to our guide on Password reset (Windows login) for step-by-step recovery instructions.

My account shows as "Standard user" but I am the only user

If your Microsoft account was set up with limited permissions, you can change the account type using the steps in Create a New Local Administrator Account above. Select your own account and promote it to Administrator.

If you need further assistance setting up or managing user accounts on your Windows device, Open a Ticket and our support team will be happy to help.

Still Having Issues?