Security Windows

How to Lock Down Windows User Accounts

Ben Stegner 05-04-2017

You might use an administrator account Windows Administrator Account: Everything You Need to Know Starting with Windows Vista, the built-in Windows Administrator account is disabled by default. You can enable it, but do so at your own risk! We show you how. Read More on your PC, but don’t trust other people with that kind of access.

Advertisement

Whether you want to keep an eye on your children’s computer usage or need to simplify a computer for a loved one 7 Ways to Ensure Your Loved Ones' PC Will Never Need Fixing Are you tech support for your family or friends? Do you receive frantic calls because they've installed malware or somehow managed to break their computer and they need you to fix it? This can be... Read More , blocking off parts of Windows is useful. Even if you’re locking your PC when you’re not using it The 6 Best Methods to Lock Your Windows PC Locking your computer is essential in preventing unattended access. Here are several great ways to do so in any version of Windows. Read More , other user accounts could be a problem.

Let’s take a look at different ways to lock down every aspect of Windows.

Use Standard Accounts and UAC

The simplest way to restrict an account’s permissions is setting it as a standard account. These limited accounts can run software and change settings that don’t affect other users, but don’t have total control. For instance, a standard account can’t install software, modify internet connection settings, or change the time.

To change an account’s permissions, visit Settings and click Accounts. On the Family & other people tab, find their name under Other people, then hit the Change account type button. This lets you change administrators to standard users. To create a new account, click Add someone else to this PC and select Standard User when asked for the type.

windows 10 user account control

User Account Control (UAC) lets you control how much standard accounts can do. Type UAC into the Start Menu and choose Change User Account Control settings. You can choose between four levels of notification. The default setting notifies admins when apps try to make changes, but not when they change Windows settings. Always Notify is more secure but as annoying as Windows Vista The Most Hated Windows Versions & Why They Were So Bad The rule of thumb is that every other version of Windows is awesome. But why have the "bad" versions of Windows — ME, Vista, and 8 — been so hated? Read More . You shouldn’t turn off UAC or everything can run as an admin without asking.

Create a Child Account

Standard accounts are great for people who have some basic computer knowledge that you don’t want screwing around with your settings. But they don’t account for the unique challenge of keeping kids safe when using a computer How the Internet of Things Is Dangerous For Your Kids Mixing kids and technology can be a scary thing. Do you know all of the ways the Internet of Things (IoT) could hurt your children? Read More . For that, you should try Microsoft’s Child Account feature in Windows 10.

Head back to Settings > Accounts > Family & other people, but this time click Add a family member under Your family. Choose Add a child and enter their email address. If they don’t have one yet, click The person I want to add doesn’t have an email address. You can create a new email address for them @outlook.com, or use your own address. We recommend making a new Microsoft account to keep everything separate.

Note that if your child already has an email address and you add them to your PC, they’ll receive an invite in their email instead. They must accept this before logging onto your computer, or the child protection measures won’t take effect.

Windows will ask you for your phone number as a backup for the child account. You can use this to get back into the account if they forget the password. Next, Windows will present you with two checkboxes asking if Microsoft Advertising can use their account info and send them promo offers. These settings are annoying for adults, let alone children, so it makes sense to disable them.

Family Setting Options

That’s all it takes to create a child account. Now, you should log into the Microsoft Family Management page online to configure safety options. You’ll find several helpful controls here:

child account restrict media windows 10

Utilize Group Policy Tweaks

Group Policy is a tool in Pro editions of Windows that lets you control all sorts of account aspects. It’s intended for corporate use, but it can make lots of awesome tweaks for home use, too. The required tool isn’t officially available in Home versions of Windows, but you can use a workaround to install the Group Policy Editor to get it on those editions.

To access the Group Policy editor, press WinKey + R to open the Run dialogue and type in gpedit.msc. Double-click on any item to change its status from Not Configured to Enabled or Disabled. Check out some of these tweaks to lock down Windows:

 

The Group Policy Editor supports many more tweaks, but the ones listed above let you lock down major Windows features.

Try the FrontFace Lockdown Tool

This app locks down a PC that’s acting as a kiosk. Since it collects common lockdown options all in one place, you can still use it to secure your own PC. Download the tool and you can run it without installing anything.

frontface lockdown tool

The Welcome tab on the left lets you pick from two preset profiles: Digital Signage Player PC and Interactive Kiosk Terminal. They contain settings so you can leave a computer out on a table for the public and not worry about people messing with it. If you’d rather customize these settings on your own, check the Startup & Shutdown, Continuous Operation, and Protection & Security tabs on the left.

You can set a program to automatically start when an account logs on, shut down the PC at a given time, disable access to the Task Manager, and even hide System Tray icons. Some of these changes will affect the entire machine, while others apply to only one user account. FrontFace provides a great way to beef up a restricted profile, especially if you don’t want to track down all the settings individually.

How Do You Lock Down Your PC?

These options let you restrict your computer to pretty much any level you’d like. Whether you want to keep inexperienced users from installing software or want to keep your kids safe, you can do it with these tools. Most other locking software costs a fair bit and doesn’t offer anything most users need that you can’t get with the above methods. For a nuclear option try a Deep Freeze, which resets your PC System Restore On Reboot - Deep Freeze Your Windows Installation With Free Tools If you've ever wanted to maintain a system state to keep it secure and not allow any changes, then you might want to try deep freezing your Windows computer. Read More to a standard image every time you reboot.

For more, check out everything you should know about managing user accounts 5 Tips for Managing Windows User Accounts Like a Pro Windows user accounts have evolved from isolated local accounts to online accounts with various privacy challenges. We help you sort out your accounts and find the settings that work for you. Read More .

What are your favorite tools for blocking off Windows features? Let us know what you restrict on your computer by leaving a comment!

Image Credits: Rawpixel.com/Shutterstock

Explore more about: Account Sharing, Microsoft Account, Parental Control, User Account Control, Windows 10.

Whatsapp Pinterest

Enjoyed this article? Stay informed by joining our newsletter!

Enter your Email

Leave a Reply

Your email address will not be published. Required fields are marked *