Windows 10: Should my Microsoft Account have administrator privileges?

I just finished reinstalling Windows 10 (Creator version) and decided to have the installation process create a Microsoft Account instead of bypassing that step like I have on other laptops in the past and creating a local account later. After the install I went to Accounts in the settings and saw that the Microsoft Account was listed as an Administrator. I always thought the main user should only have standard privs for security purposes. Thoughts? Should I create a new admin account and try and change the MSA to a standard account?

:)

 

Cannot setup new account on computer running Windows 10, Anniversary Update - v1607

Sorry I should have included that in my original post. I am logged into an Administrator account so I should have the authority to create new accounts.

It doesn't say "Local Account Administrator" like in your screen print, it just has my Microsoft account name
L: *** Email address is removed for privacy *** and under that is says "Administrator"

 

Is there some way to continue in Windows Insider program without using a Microsoft Account...

or at least make it a non-administrator account?

I have a problem using my online Microsoft Account if it is an administrator account on my local machine. It violates the very basics of online computer security:

1) If someone manages to guess my password (or manages to steal it) they could potentially have administrator access to my computer. One should never make an online password the same as their login credentials for a local machine, especially if its an administrator
account.

2) One should never log into their computer as an administrator to perform everyday tasks (something the Microsoft Account was designed for)... e-mail, web browsing, etc...

In order to opt into the Insider Program you must use a Microsoft Account, and it must have administrator access to control the update pace (fast or slow ring) on the local machine... that is insane. The option to opt into the insider program is not on the
Windows Update page unless the Microsoft Account has administrative privileges.

Is Microsoft considering this security oversight?

 

Hello cjayed, *Smile

The account you created during Windows Setup will be an administrator by default since you need at least one administrator account on the PC to be able to do anything that requires elevated rights.

 

The first account created on installing Windows is always an administrator - it has to be, as it's the only account you have and you need to be able to manage your Windows.

It's always a sensible precaution to have at least one more local account that is an administrator. This can be very useful should you need to make emergency repairs. Whether you then keep the Microsoft account as an administrator is a personal choice. As I don't use a MS account I'll leave it to others to advise.

Whatever you do, make sure you have another administrator account and that you can log in to it successfully before you demote the MS account to a standard user!

 

That depends on your particular situation. How tech savvy are you when it comes to not changing something you are not supposed to and locking yourself out of your own computer? How much do you know about getting back in should something that you swear is beyond your control happens to lock you out of your account? How often do you do full system image backups? How important is the data you have stored in your user folder?

I only have one user account on my computer, using a Microsoft Account login and it has administrator privileges. All my important data is stored on a NAS (external to the computer). I have never gotten locked out of my account, because if I am going to do something that I think has the possibility of locking me out I create a temporary local administrator account first. If I should get locked out due to some action by Microsoft, I know how to get into my computer via a bootable rescue drive.

If you don't meet all those conditions, then I recommend keeping an extra local account created as administrator for emergency use only. Just don't forget the password to it!

 

Thanks for the responses. I did create a new user (non-msa) and assigned it Admin privs. Will change the msa to standard user when I finish setting up the laptop.

 

Make sure you make that change from the new user account you created!

 

oh shoot...yes of course...THANK YOU!