Managing User Accounts in Windows 11

Summary

This guide helps you troubleshoot and resolve: Managing User Accounts in Windows 11. Follow the steps below to fix the issue.

Common Causes

Types of User Accounts

• Administrator: Full control over the system, can install software, change settings, and access all files.
• Standard User: Can use apps and files but cannot install most software or change system‑wide settings without admin approval.
• Local Account: Account exists only on the local PC, no Microsoft services integration.
• Microsoft Account: Linked to a Microsoft email, provides access to OneDrive, Microsoft Store, sync settings, and more.

Step-by-Step Instructions

Create a New Local User Account

1. Open Settings (Win + I).
2. Navigate to Accounts > Family & other users.
3. Click Add account.
4. Select "I don’t have this person’s sign‑in information".
5. Choose "Add a user without a Microsoft account".
6. Enter a username and, optionally, a password (recommended).
7. Click Next. The account is created as a Standard User by default.

Create a New Microsoft Account User

1. Follow steps 1–3 above.
2. Enter the Microsoft account email address (or create a new one).
3. Follow the prompts to set up the password and security questions.
4. Click Next. The account will be linked to Microsoft services.

Change Account Type (Administrator or Standard User)

This section only changes whether an account is an Administrator or a Standard User. It does not convert between a local account and a Microsoft account.

1. Go to Settings > Accounts > Family & other users.
2. Select the account you want to modify.
3. Click Change account type.
4. Choose Administrator or Standard User from the dropdown.
5. Click OK.

Switch Between Local and Microsoft Account

Local to Microsoft

1. Open Settings > Accounts > Your info.
2. Under “Account settings”, click Sign in with a Microsoft account instead.
3. Follow the prompts to sign in or create a Microsoft account.

Microsoft to Local

1. Open Settings > Accounts > Your info.
2. Under “Account settings”, click Sign in with a local account instead.
3. Verify your identity and create a username and password for the local account.

Configure Sign‑in Options

1. Go to Settings > Accounts > Sign‑in options.
2. Choose a sign‑in method:
   • Password: Standard method.
   • PIN: More convenient and secure than a password.
   • Windows Hello Face: Uses facial recognition (requires compatible hardware).
   • Windows Hello Fingerprint: Uses a fingerprint reader (requires compatible hardware).
   • Security Key: Physical key for strong authentication.
   • Picture password: Draw a pattern on a chosen image.

Set Up Dynamic Lock

Dynamic lock automatically locks your PC when you leave.

1. Pair your phone with your PC via Bluetooth.
2. Go to Settings > Accounts > Sign‑in options.
3. Scroll down to Dynamic lock.
4. Check the box for Allow Windows to automatically lock your device when you’re away.

Domain Accounts

If your small business uses a domain or Active Directory environment, user accounts are managed by your IT administrator. Domain credentials are not created or changed through the local Settings app. If you encounter login issues with domain credentials, refer to Cannot login with domain credentials. Contact your administrator for domain account requests or password resets.

Troubleshooting

• Can’t Create Account: Ensure you are logged in as an Administrator.
• Sign‑in Options Not Available: Some options require specific hardware (e.g., a webcam or fingerprint reader) or a Microsoft account. A local account cannot use Windows Hello biometrics.
• User Account Control (UAC) Prompts: Standard Users will see UAC prompts when attempting tasks that require Administrator approval. Enter Administrator credentials or contact your IT support to authorise the action.
• Forgotten Local Account Password Without Reset Disk:
  • If another Administrator account exists on the PC, sign in with that account and reset the forgotten password via Settings > Accounts > Family & other users or using the net user command in an elevated Command Prompt.
  • If no other Administrator account is available, you may need to boot from Windows installation media to access recovery options or contact Open a Ticket for assistance.
• Corrupted User Profile: Symptoms include missing desktop files, reset application settings, or error messages when signing in. Try signing in with a different account. If the issue persists, copy important files from the corrupted profile folder to a new account and contact IT support to rebuild the profile.
• Account Locked Out:
  • For Microsoft accounts, reset the password via security questions or the Microsoft account recovery page.
  • For local accounts, use a password‑reset disk, have an Administrator reset the password with net user, or boot from Windows installation media to enable the built‑in Administrator account.

Still Having Issues?