Guide for Separate Administrator and Standard User account

The following are the step-by-step guides for separating Administrator and Standard User account. Please visit here for more information about the security measures.

Getting Started
  1. Separate Administrator and Standard User account
    • For creating a new local administrator type account and changing current account to standard user type
  2. Logon at User Account Control prompt for Administrator access rights
    • For allowing privilege escalation

A. Separate Administrator and Standard User account

Note: Steps below based on Windows 10 version 1909

  1. Select Accounts in Windows Settings

  2. Select Family & other users or Other users on the left side

  3. Select Add someone else to this PC under Other users

  4. Select I don't have this person's sign-in information

  5. Select Add a user without a Microsoft account

  6. ● Enter a User Name (should be different from a ITSC Network Account)
    ● Enter a secure Password
    ● Re-enter the Password
    ● Complete Security questions
    ● Click Next

  7. ● Select the new user just created
    ● Click Change account type
    ● Change Account type to Administrator
    ● Click OK

  8. ● Select all users shown as Administrator
    ● Click Change account type (jump to and follow Step 9 if account type cannot be changed)
    ● Change Account type to Standard User
    ● Click OK

  9. ● (skip this step if step 8 is completed)
    ● Click Start to open Start Menu
    ● Select Windows System
    ● Select Control Panel
    ● Select Change account type under User Accounts
    ● Select all users shown as Administrator
    ● Select Change the account type (jump to and follow Step 10 if this option cannot be found)
    ● Select Standard
    ● Click Change Account Type

  10. ● (skip this step if step 9 is completed)
    ● Select all users shown as Administrator
    ● Click Properties
    ● Select Group Membership
    ● Select Standard user
    ● Click OK
    ● Click OK
    ● Click No if asking for sign out

B. Logon at User Account Control prompt for Administrator access rights

  1. ● Enter an administrator type account and password to continue
    ● Note: As the administrator type account created in part A above is a local account, please enter .\ before the username e.g. .\cchelp