Windows 10: How to create a local account in Windows 11 with restriction to access internet and USB...

Dear all,I am using Windows 11 Pro, version 23H2, OS build: 22631.3593. I am the admin user of the PC.I want to create a local user for my staff to read some confidential documents. Therefore, I need to restrict that local user to access internet and USB storage, i.e. no internet access, no USB storage is allowed. Is it possible to do so?Any ideas are greatly appreciated.

:)

 

How to create a Local account in Windows 11

Windows 11, the latest Operating system by Microsoft is released on October 5th, 2021. When you set up a device for the first time, the user is strongly recommended to use Microsoft Account as it offers a lot of advantages compared to a Local account. For Home editions, there is no option to create a local account during the first run. Afterwards you have set your primary account as Microsoft Account, you can create a Local account if you need. This article shows how to Create a new Local account in Windows 11.

Microsoft Account vs Local account

A Local account is a kind of Offline account, where the detail is limited to only one PC. No data is synced over to other computers, and for apps that require sign in, need to be signed in separately using a Microsoft Account.

A Microsoft Account is an online account, which uses your email and password to sign in to the computer. It offers more security, provides more recovery options in case you forget your PIN or Password, Sync your themes, apps and settings to the other devices with the same Microsoft account, reduces activation hassle etc etc. One of my personal favorites is OneNote app - If I note something on a notebook, I can quickly access them on another computer as long as I am using the same Microsoft Account. In Windows 11, the start menu has a separate section for the files you recently accessed, provided they are on another computer.

How to Create a Local account in Windows 11

I list 3 methods to Create Local account in Windows 11 apart from the Settings app which is known to all, starting from the UI to the command line.

1. Create a Local account using netplwiz

• Press Win+R Keys to open Run dialog box.
  
• Type netplwiz and press enter.
  
• Click Add button.
  

• Click Sign in without a Microsoft Account. For Windows 10 Home, if you do not see that option, disconnect from the Internet.
  
• Click Local account if prompted.
  
• Type the username you want, and the password. You must also specify a hint. Click Next.
  

• Click Finish.
  
• Log off and log in to the new account.
  

Add a Local account using command Prompt.

Microsoft also offers an option to create a Local account using Command line. To create a Local account using Command Prompt(You can also use Terminal or Windows Powershell), see the steps below:

• Type cmd in the search, right-click it and press enter. Alternatively, press Win+R, type cmd in Run and Press Ctrl+Shift+Enter.
  

• Execute the command in the following format:
  

net user "<Username>" "<Password>" /add

• Replace <Username> with the desired username, and <Password> with the desired password.
  

These steps can show you how to add a new local user account to Windows 11. If you want, you can promote the account from a standard account(by default), to an administrator that can make system wide changes, using the steps below:

• Go to: Settings>Accounts>Family and other users.
  
• Under Other users, click "Change Account type".
  
• Change it to Administrator.
  

Sumit (@_sumitdhiman) / Twitter

 

Local account with restricted access?

Sorry, doesn't help. I know how to create local accounts, but I want ones that are
restricted, as in only able to go to whitelisted websites and only accessing apps from the store installed by an admin with a Microsoft account. Why did they take this away in Windows 10?

 

Creating custom restrictions for Local User in Windows 10

Hello there, How I can create custom restrictions for a Local Account in Win10 which can't be able to affect the Admin Account's data.

Like limited file access, limited settings access limited controlling over the system, etc.

If possible, please suggest me the way!

Thanks