Introduction
In our last session, we explored how to control the applications running on a computer using the Task Manager. This is a key part of system management. Today, we'll take that a step further by learning how to manage who can use the computer and what they're allowed to do. This is a fundamental skill for any technical support analyst, as it lies at the heart of system security and organization.
Your goal for this lesson is to learn how to create new user accounts in Windows and, most importantly, to understand the critical difference between Standard and Administrator account privileges. This knowledge will enable you to set up computers for new users and enforce basic security policies in a professional environment.
Why Do We Need Different User Accounts?
On a personal computer, you might be the only person who ever uses it, so the idea of multiple accounts can seem unnecessary. But in a business or even a shared family setting, user accounts are essential. They provide separation, security, and control.
To understand the core reasons for using different accounts, let's look at a brief explanation.
Manage User Accounts - OpenClassrooms
This introductory section from an OpenClassrooms course explains the fundamental purpose of user accounts.
Read the first three bullet points under the main heading, starting from the introduction. These points outline why separating users is so important for administration and security.
As you just read, user accounts serve to:
- Separate permissions: Ensure only authorized people (like IT staff) can make critical system changes.
- Isolate user spaces: Keep one user's files and settings private from another user on the same machine.
- Control access: Define who can see or edit specific files and folders.
This separation is the foundation of a secure and well-managed computer system. The most important distinction in this system is the level of power an account holds.
Administrator vs. Standard User: The Two Levels of Power
Windows primarily uses two types of accounts for daily use: Administrator and Standard User. Understanding the difference between them is one of the most important concepts in Windows administration.
- An Administrator account has complete and unrestricted control over the PC. It can change any system setting, install any software, access all files on the computer (including other users' files), and create or delete other user accounts.
- A Standard User account is much more limited. It can run most software and change system settings that don't affect other users or the security of the PC. However, it cannot install most new applications, make major changes to the operating system, or access other users' private files.
The following video provides an excellent summary of why this distinction is so crucial for security.
How to set user permissions in Windows // Windows Fundamentals // EP 6.5
This video from NetworkChuck Academy gets straight to the point about the power difference between account types.
First, watch the brief introduction where the speaker frames the problem. Then, skip ahead to the section where he defines the two main user groups from this point. He clearly explains the limitations of the "Users" group (which corresponds to a Standard account) and the total power of the "Administrators" group.
As a technical support analyst, you should always follow the Principle of Least Privilege. This security principle states that a user should only be given the bare minimum permissions necessary to perform their job. For most employees in a company, a Standard User account is all they need. This prevents them from accidentally (or intentionally) installing malicious software or misconfiguring the system in a way that requires IT support to fix.
How to Create a New User Account
Now that you understand the "why," let's walk through the "how." You will most often use the Settings application in Windows to create new accounts. The process is slightly different between Windows 10 and Windows 11, so it's good to be familiar with both.
The guide below provides clear, step-by-step instructions. Note that it describes creating a "local account," which is an account that exists only on that one specific computer, as opposed to a Microsoft account that is synced with the cloud. In a business setting, you will often create local accounts.
Set Up Multiple Users on Windows 10 & 11 | Complete Guide - HP
This HP support document provides a simple walkthrough for creating accounts.
Depending on which version of Windows you have access to, read either the section for Windows 10 or the section for Windows 11. Pay close attention to the steps for creating a local account (the instructions will say "Add a user without a Microsoft account"). This is the method you'll frequently use.
By default, any new account you create this way will be a Standard User account, which aligns perfectly with the Principle of Least Privilege.
For a visual demonstration, this next video walks through the process on Windows 11.
How to create Multiple User Accounts in Windows 11
This video from Torogi Pro shows the process in action, which can help solidify the steps.
Watch from the beginning (the first minute) to see how to navigate to the account settings and create a new Standard User. The creator explicitly points out the choice between Standard and Administrator. Then, watch the brief segment from this point, where he notes that the first time a new user logs in, Windows takes a few minutes to set up their profile. This is a useful practical tip—if you create an account for a user, you should let them know to expect this.
Changing an Account's Privilege Level
What if a user needs to install a specific piece of software that requires administrator rights? As a support analyst, you wouldn't give them an administrator account permanently. Instead, you would temporarily elevate their account's privileges, or more likely, enter your own administrator password when prompted.
If you do need to change an account's type, the process is very straightforward.
The same HP guide you read earlier shows exactly how to do this.
Set Up Multiple Users on Windows 10 & 11 | Complete Guide - HP
This section shows you how to change an existing account's type.
Find the heading "Managing User Accounts" and read the short subsection Changing Account Types. The steps are simple: navigate to the user's settings, select "Change account type," and choose the new privilege level.
Remember, this action can only be performed while logged into an Administrator account. A Standard User cannot change their own account type or anyone else's. This is a critical security feature.
Conclusion
In this lesson, you've learned one of the most fundamental administrative tasks in Windows. Properly managing user accounts is essential for maintaining a secure and stable computing environment, whether for a single user or an entire organization.
Here are the key takeaways:
- User accounts are used to separate user files and control access to system settings.
- Administrator accounts have full control over the PC, while Standard User accounts are restricted for safety.
- The Principle of Least Privilege is a core security concept that means you should always assign users Standard accounts unless they have a specific need for administrator rights.
- You can create and manage user accounts through the Settings > Accounts panel in both Windows 10 and 11.
In our next lesson, we will put this knowledge into practice. We'll explore how to install a software application from a trusted source, an action that often requires the administrator privileges we discussed today.