Give a family member a standard Windows 11 account, not your admin login

Sharing one Windows administrator login gives everyone access to the same browser sessions, cloud files and system changes. Windows supports separate users and standard accounts. Microsoft's family guidance emphasizes that a child's account should be standard for family controls to work properly. The better setup gives each person their own sign-in, verifies the standard account can do everyday tasks, and keeps at least one recoverable administrator account with the owner.

Before you start​

Back up the current shared profile before changing it. Decide whether the new person needs a Microsoft account for family features or a local account. Have the account holder present to configure their password and recovery methods. Do not hand them your administrator password as a shortcut. If the PC belongs to an employer, follow its account policy.

Do it step by step​

1. Open Settings > Accounts > Other users or Family, depending on the relationship and Windows build. Add the person with their own identity rather than reusing your login.
2. Inspect Account type and choose Standard user for routine use. Keep your own administrator account protected with a separate credential and tested recovery method.
3. Have the person sign in once and complete their profile. Check their Desktop, browser and OneDrive are not automatically using your account. A new Windows login is not enough if shared apps still use your cloud credentials.
4. Test everyday tasks: browsing, school or work apps, printer and file access. For an installation that requests elevation, approve it deliberately from the administrator account only when the software is trusted.
5. Move personal files using explicit copies and permissions, not by giving the new user broad access to your entire profile. Verify the copied files open under the intended account.
6. Lock your own session and test switching users. Set a reasonable automatic lock interval. Periodically review who has administrator rights and remove accounts no longer needed after backing up their data.

Check the result​

The family member signs into an independent standard account and can perform normal tasks without seeing your private app sessions or needing your admin password.

If something goes wrong​

If an app insists on administrator rights for ordinary use, check the vendor's guidance before promoting the whole account. If family controls fail, verify the child's account type and actual Microsoft account association.

Know the limit​

Separate Windows accounts reduce accidental exposure but do not make a shared physical device immune to malware or an administrator's access. Backups and device updates still matter. Microsoft user accounts Microsoft family account guidance

Decision checkpoint​

Test the privacy boundary with a harmless sample: sign into the new standard account and try to open a file stored only in the owner's profile. It should not simply appear because both users share a machine. Next, check each browser's account avatar and cloud sync identity; an accidentally shared browser profile can undo the benefit of separate Windows logins. Keep the administrator password private and use it only for a verified installation or settings change.