When installing Windows 10, Windows 7 or Windows 8 for the first time we are asked to create a new user, possibly with the addition of a password. Furthermore, even if there is no warning in this regard, other accounts are automatically created: the Guest account with severely limited privileges, an Administrator account that has in fact all possible privileges and the user account, the only one to which it can give a name during installation and the default one to access Windows (with well-defined privileges necessary for home use).
In Windows 10 and Windows 8 the user can be linked to a Microsoft account, so as to obtain some advantages such as protection with encrypted authentication and control of account activity from another PC (read how to convert the account Microsoft in local account).
But if we wanted to create new limited accounts to assign to our relative, friend or when we share the location with another colleague, how can we do "> How to activate and create a Guest account
1) Why have multiple accounts on your PC
Having multiple accounts registered on the Windows computer allows you to differentiate the activities, documents, files and programs for the various users who can use the PC.
For example, at home, very often you have a computer that is used by the whole family.
Instead of accessing all with a single account and sharing the folders of documents and the desktop, it is better to have different accounts, so everyone can use the computer as he wishes, without the possibility of being able to do damage (because without administrator rights), with the possibility of being able to organize programs, files and desktops as you like and protect access to some private files .
In addition, having your own personal account on Windows allows you to surf the Internet in private with your favorite browser without risking that others can spy on the sites visited.
It becomes like using a mobile phone with your SIM card.
2) Manage user accounts on Windows
To see the active accounts on Windows, just go to the Start menu -> Run or Search (or press Windows + R on the keyboard) and type the command lusrmgr.msc .
All users on the PC will appear, even those currently hidden (not visible); the latter are indicated by a down arrow symbol.
To add new ones just right click in the Users folder and select the New User item.
As explained in another related guide on how to protect guest and administrator accounts, it is convenient to disable Guest because it is never used.
The Administrator account is disabled by default, we can use the methods described above to verify it.
Those who know how to use the computer can add their user account to the Administrators group.
To add a user to a group, from the properties tab, just press on the Member of item, press on Add -> Advanced -> Find -> administrators .
Alternatively we can manage users by going to the Settings menu -> Accounts -> Family and other people .
We can add new family members on this screen (which will also be added to any configured Microsoft account) or add strangers, so as not to find them as relatives in the account.
On all versions of Windows we can control users and add new ones by going to Control Panel -> User Accounts -> Manage Account .
To add more, just click on the Add a new user button in the PC settings .
3) User account security
A good security practice is to set access passwords for all accounts, even those that are disabled (because a virus could enable them and if they do not have passwords they become open doors to take control of the PC).
To change the local password (without being connected to a Microsoft account), usually just press the CTRL + ALT + DEL keys and select the Change password item.
If you prefer a simpler configuration screen, the only one available in Windows Home version, you can use the user screen accessible from the Control Panel or by typing in Run the control.exe userpasswords command.
In Windows 10 and Windows 8 the creation of a new user and the management of the existing ones is done by pressing the Windows + I keys together or by clicking on Settings and going to the Account -> Access options section.
We can change the password (or set a new one) also from the Command Prompt, using the command.
net user username username password
Where instead of username, we must enter the account name.
4) Disable Administrator account
The administrator account may be useful in an emergency, but in normal scenarios it is better to leave it disabled.
To disable the administrator account in these versions of Windows, you need to open a command prompt from the Start menu and write the command:
net user administrator / active: no
We will have disabled the administrator.
5) Account Tuner
To manage Windows accounts and to make them secure, you can use a program that facilitates these operations and allows you to configure permissions quickly as Accounts Tuner.
This program can be used by computer administrators to modify the security settings of local and remote users.
Without going therefore in the local or group security policies, you can see all the information directly from the synthetic interface of Accounts Tuner.
From a drop-down menu you can select the permissions for each user, also of other computers connected to the network.
The parameters include the following options:
- Disable an account;
- Block an Account temporarily after a certain number of failed login attempts
- Password expiration;
- Password required;
- Change password after x days.
The main interface allows you to select the user profile you want to modify and also shows usage statistics over time.
6) Conclusions
In Windows 10 and 8 there are some differences in account management.
We have seen, in other articles:
- How to manage user accounts and passwords in Windows 10 and Windows 8
- How to use the same Microsoft account on different Windows 10 and 8 PCs
If you deem it appropriate, you can then create other user accounts that will be included in the Users group, without administrator rights.
At the first access you will be asked to set a password so each person will be the exclusive owner of access and use of the computer .
Ideally you could also create a secure account to prevent any viruses or problems .
The discussion regarding the management of reading and editing permissions for files and folders for accounts, a difficult topic, of which I have written a specific guide, is also becoming clearer.
