You might use an administrator account for yourself on your PC, but perchance you don't trust other people with that kind of admission.

Whether you want to go on an centre on your children'south computer usage or demand to simplify a computer for a loved one, blocking off parts of Windows is useful. Even if you lock your PC when you're not using it, the access that other user accounts have could be a trouble.

Let's take a look at different ways to lock down user accounts in Windows 10.

Utilise Standard Accounts and UAC

The simplest way to restrict an account'due south permissions is to make it a standard business relationship. These limited accounts can run software and change settings that don't bear on other users, merely they don't take total control.

For case, a standard account can't install software, modify cyberspace connection settings, or change the system time.

To alter an account's permissions, visit Settings > Accounts.

On the Family unit & other users tab, click an account proper noun nether Other users, so hit the Change account type button. This lets you choose between Administrator and Standard User.

Windows Change Account Type

If you need to create a new account, click Add someone else to this PC. Walkthrough the steps to sign in with a Microsoft account (if you want) and when prompted for the business relationship blazon, cull Standard User.

When discussing user accounts, y'all should be aware of User Account Control (UAC), a Windows feature that lets yous run programs as an administrator simply when needed. With a Standard account, UAC requires you lot to enter an ambassador countersign to take admin deportment, similar installing software or changing system-wide settings.

Administrators, meanwhile, only need to confirm a prompt to do so. This ways you should make sure to lock your computer when you lot aren't using it. Review our caption of UAC and admin rights for more than information.

Have Advantage of Microsoft's Family Grouping

Standard accounts are great when y'all don't desire other people messing around with your PC's settings. Simply they don't account for the unique challenge of keeping kids condom when using a computer. For that, you should attempt Microsoft's "family group" characteristic in Windows ten.

To kickoff, head dorsum to Settings > Accounts > Family & other users. Yous can ready up a new kid account on your PC, but information technology's a bit easier if you click Manage family unit settings online to open up the Microsoft Family Prophylactic page. Sign in with your Microsoft account to continue.

If this is your commencement fourth dimension setting this up, click the Create a family unit grouping button. You'll so see a prompt to add a user to your family unit.

Select Member and enter the e-mail address or mobile number tied to your kid's Microsoft account. Complete the CAPTCHA, and so click Send invite.

If your kid doesn't have a Microsoft account, click the Create i for them link at the lesser. Yous tin can create a new Microsoft account using their existing electronic mail accost, or make them a new @outlook.com account.

Microsoft New Family Member

Your child will receive an email with an invitation to join your family group. They must accept this before the family settings will take event, so make sure they do so. Later on they accept it and sign into the figurer with their Microsoft account, yous can get-go using the family grouping options for them.

While the family feature also lets you manage your children on Xbox One and Android, we'll focus on Windows 10 devices here.

Managing Your Family unit Group Members

Once your child's account is accepted into your family unit grouping, you can alter various options about how their account works. Visit the Microsoft Family unit Management page to configure this.

There, you'll run into each member of your family unit listed. Choose Action under their name to see the apps your child has used, what websites they've visited, web searches they've performed, and their screen time.

Along the tiptop, you'll encounter the following items to manage these:

  • Screen time: It allows you lot to cull how much time the person can spend on the computer, plus what hours are immune for use. You can prepare a Time limit of anywhere from xxx minutes to 12 hours. It likewise lets y'all set limits for each day of the calendar week. So for example, y'all could let two hours of time on Fridays only only allow use from 7am to 10pm.
Windows 10 Screen Time Family
  • App and game limits: If y'all'd like to get more than specific with your limits, utilize this panel to select specific apps and/or games to restrict. You can see how often your children use apps on average, and so use similar settings to the above carte du jour to choice how much time they can spend and when they're immune to apply the apps.
  • Content restrictions: This folio lets you cull your child'south historic period to automatically allow content appropriate for their age group. For example, a 14-twelvemonth-onetime volition be able to lookout PG-13 movies and play video games rated Teen or lower.
    • Yous can also cull specific apps and games to always permit or always block, including alternative web browsers.
    • Finally, you can block inappropriate websites in Microsoft Edge with a slider. Turning this on blocks other browsers, and you lot tin e'er allow specific websites if yous like. For more control, you tin can restrict access to only an approved list of sites.
  • Spending: Here you can require your approval for the kid to purchase items in the Microsoft Store, as well as emailing you when they buy something. Yous can too put money in your kid's account to permit them to buy content of their selection.
  • Find your kid: If your kid has an Android device, y'all can install the Microsoft Launcher app to see where they are here.

Utilize Group Policy Tweaks

Grouping Policy is a tool in Pro editions of Windows that lets you lot command all sorts of account aspects. While it's intended for corporate use, you can make lots of awesome tweaks with Group Policy, too.

The required tool isn't officially available in Home versions of Windows, but y'all can use a workaround to install the Group Policy Editor on Windows Domicile to go it on those editions.

To admission the Group Policy editor, press Win + R to open up the Run dialog and type in gpedit.msc. Then you'll need to navigate to the detail you desire to change; double-click to alter its status from Not Configured to Enabled or Disabled. Check out some of these tweaks to lock downwards Windows:

  • Reckoner Configuration > Administrative Templates > Windows Components > Windows Installer and enable Turn off Windows Installer to prevent anyone from installing software.
  • User Configuration > Administrative Templates > Command Panel, then use Hibernate specified Control Console items to remove some entries, Testify only specified Control Panel items to create a restricted listing, or Prohibit access to Control Panel and PC settings to remove them entirely.
Group Policy Lock Control Panel
  • User Configuration > Administrative Templates > System contains Prevent access to the command prompt and Prevent access to registry editing tools then savvy users can't employ them as workarounds. Also, Don't run / Run only specified Windows applications lets yous control what software the user tin run.
  • User Configuration > Administrative Templates > Arrangement > Ctrl + Alt + Del Options lets you lot remove the user's ability to change their password, open the Job Manager, log off, or lock the PC.
  • User Configuration > Administrative Templates > Windows Components > File Explorer can Prevent access to drives from My Computer if yous don't want an business relationship poking around in the file system.
  • Reckoner Configuration > Windows Settings > Security Settings > Account Policies > Countersign Policy holds several options that let y'all restrict passwords. Set Maximum password age to forcefulness users to change their passwords, and Minimum password length so people can't use short passwords. Password must meet complexity requirements forces passwords to contain at least half dozen characters and contain a mix of letters, numbers, and symbols.

The Group Policy Editor supports many more than tweaks, just the ones listed above let you lock down major Windows features.

Allow Microsoft Store Apps Only

The majority of apps on your PC are probably from exterior the Microsoft Store. Nonetheless, if you'd like to lock downwardly an account by blocking information technology from installing software, y'all can enable a setting in Windows to just allow software installs from the Microsoft Store.

You'll find this under Settings > Apps > Apps & features. At the tiptop, modify the dropdown box to The Microsoft Store only to prevent install of apps from other sources. Combined with the Group Policy edit above to block access to the Settings app, this should proceed your PC gratuitous of unwanted software.

Microsoft Store Apps Only Windows 10

Compared to traditional desktop software, Store apps don't require equally many permissions and are thus safer for your computer. Have a look at our comparison of Store and desktop apps for more than info.

If none of the above did the job for you, you might need to turn to software that locks down your Windows PC further. For another option, cheque out deep freeze tools, which reset your PC to a base of operations snapshot every time you reboot.

FrontFace Lockdown

FrontFace Lockdown

This app is meant to lock downwardly a PC that'south interim as a kiosk. Since it collects common lockdown options all in 1 place, you tin still use information technology to secure your own PC.

The Welcome tab on the left lets you pick from ii preset profiles: Digital Signage Player PC and Interactive Kiosk Terminal. They contain settings and then you can leave a computer out on a table for the public and non worry well-nigh people messing with information technology.

If you lot'd rather customize these settings on your own, bank check the Startup & Shutdown, Continuous Operation, and Protection & Security tabs on the left.

Y'all tin can set a plan to automatically outset when an account logs on, close down the PC at a given time, disable access to the Task Manager, and even hide Organization Tray icons. Some of these changes will impact the unabridged auto, while others utilise to only 1 user business relationship.

FrontFace provides a nifty mode to beef up a restricted contour, especially if yous don't want to rail down all the settings individually.

Download: FrontFace Lockdown (Complimentary)

Install-Block

Install-Block Windows Example

This tool lets you lot require a countersign to run apps that you lot specify. Yous can also choose keywords (similar "install" and "setup"), and then the app will auto-notice whatsoever windows that utilise those words and block them. Information technology besides lets you easily block certain Windows features, just like the Group Policy editor.

The app offers a free trial with a generic countersign, preventing it from offering any actual security. The total version is $xix.95 if you decide information technology'southward worth ownership.

Download: Install-Block (Costless trial, $19.95)

How Do You Lock Downward Your PC?

These options let you restrict your estimator to pretty much any level you'd similar. Whether you want to keep inexperienced users from installing software or desire to protect your kids every bit they use a computer, you tin do it with these tools.

The above tools should be enough in many cases. For more than resources for parents, though, have a look at the best parental control apps for Windows.

Image Credits: Rawpixel.com/Shutterstock