Hot Take Microsoft Quietly Removes Local Account Instructions for Windows 11

vtqhtr413

Level 27
Thread author
Well-known
Aug 17, 2017
1,609
Microsoft has been pushing hard for its users to sign into Windows with a Microsoft Account. The newest Windows 11 installer removed the easy bypass to the requirement that you make an account or login with your existing account. If you didn't install Windows 11 without a Microsoft Account and now want to stop sending the company your data, you can still switch to a local account after the fact. Microsoft even had instructions on how to do this on its official support website - or at least it used to...

Microsoft's 'Change from a local account to a Microsoft Account' guide shows users how they can change their Windows 11 PC login credentials to use their Microsoft Account. The company also supplied instructions on how to 'Change from a Microsoft account to a local account' on the same page. However, when we checked the page using the Wayback Machine, the instructions on how to do the latter appeared on June 12, 2024, then disappeared on June 17, 2024. The 'Change from a Microsoft account to a local account' instructions yet haven't returned.
 

SpiderWeb

Level 13
Verified
Top Poster
Well-known
Aug 21, 2020
603
I think the implications are clear. They want to retire the option to create a local account. Either you log in through your personal Microsoft account, or educational account or corporate domain account. They will implement dark patterns, like Apple, which make it difficult to use a device without signing in.
 

Marko :)

Level 23
Verified
Top Poster
Well-known
Aug 12, 2015
1,251
I think the implications are clear. They want to retire the option to create a local account. Either you log in through your personal Microsoft account, or educational account or corporate domain account. They will implement dark patterns, like Apple, which make it difficult to use a device without signing in.
Don't worry! We'll always find a way.
 

kailyn

Level 2
Jun 6, 2024
85
Microsoft gets blamed for not providing enough security. So then to counter this, it attempts to enforce use of a Microsoft Account (Entra ID) and forced Windows updates & upgrades, Microsoft Defender, Smart Application Control, S Mode, etc. Then it gets criticized for over-reach.

It should still offer users the easy option to instead use a local account during installation, however what all the various articles do not tell you is that forced Microsoft Account during install is to counter piracy.
 

Victor M

Level 12
Verified
Top Poster
Well-known
Oct 3, 2022
573
I tried to use OOBE/BYPASSNRO today. And the latest Windows 11 installer does not allow you press Shift-F10 to open a command prompt.

I had to use an old MS account to complete installation.

Then I created a Local Account, still the same way by disconnecting my Ethernet cable. And then sign into that Local Account and removing that Outlook.com based account.

I did not try to open a command prompt at the very beginning of the Win 11 Setup to disable TPM check - my machine has TPM. So I don't know if Shift-F10 is disabled everywhere in the setup or only at the last phase.
 
Last edited:

silvers

New Member
Apr 3, 2024
7
It should still offer users the easy option to instead use a local account during installation, however what all the various articles do not tell you is that forced Microsoft Account during install is to counter piracy.
Data collection is the bigger reason than countering privacy which is at best distant second.

Microsoft gets blamed for not providing enough security. So then to counter this, it attempts to enforce use of a Microsoft Account (Entra ID) and forced Windows updates & upgrades, Microsoft Defender, Smart Application Control, S Mode, etc. Then it gets criticized for over-reach.
Not sure why people assume that the privacy invasive activities are necessary for security. Its not so mutually inclusive like some of you like to believe. Some degree yes but not even remotely close to the extent they're doing it. Its a misleading and wildly exaggerated association thats only partially true.
 
Last edited:

TairikuOkami

Level 37
Verified
Top Poster
Content Creator
Well-known
May 13, 2017
2,628
About time the local account was disabled for good, people have no idea how insecure it is, not to mention unreliable, yet they complain that Windows does not remember anything upon reinstall unlike their phones with mandatory Apple/Google accounts. For the record, you can always use the local hidden administrator account, when you do not care about security anyway.
 
  • Like
Reactions: oldschool

kailyn

Level 2
Jun 6, 2024
85
Data collection is the bigger reason than countering privacy which is at best distant second.
Microsoft does not need a user to create and use a Microsoft Account to collect user and system data. It makes very little difference if the Windows system is using a local or a Microsoft Account. The telemetry and data collection are still happening at a large scale.

Anyone that owns any digital device or uses a bank or credit card, that user is being tracked and their data is harvested.

Using a local account on Windows to "avoid" or "minimize" data collection is wasted effort. Users that want "privacy" and reduce data collection have only one real OS option and that is one of the privacy focused Linux distros AND a privacy configured system such as the Purism Librem 14 laptop and the Purism $2000 Liberty Phone - Linux phone.
 

Can't Decide

Level 1
Dec 15, 2023
35
Privacy is one thing but how about other issue.

1) If one buy all the hardware components and brought offical windows key but being blocked at the installation part and force you to make an account becuse you need an account in order to use it. Doesn't it make people angry?

2) If one signed in using Microsoft Account and PC been infected by malware will the account also get drag into it? If so isn't it double blow to the person.

3) If anything happen to the Mircosoft Account will your PC get drag into it or get lock out?

4) What if Microsoft monthly patch automactic turn on sync or turn on features that you don't even want and sync everything while you didn't even noticed. Well Microsoft tend to turn on things or even install app silently. Furthermore, Microsoft tend to enable every features by default whether sign in or not which a lot of people don't like it.
 

Trident

Level 34
Verified
Top Poster
Well-known
Feb 7, 2023
2,351
1) If one buy all the hardware components and brought offical windows key but being blocked at the installation part and force you to make an account becuse you need an account in order to use it. Doesn't it make people angry?
A lot of services require an account to be used.

2) If one signed in using Microsoft Account and PC been infected by malware will the account also get drag into it? If so isn't it double blow to the person.
Microsoft provides the tools that you need to keep your computer free from malware, under normal usage and circumstances. Upon installation, all malware that doesn’t affect the UEFI should have been purged. Entering your account details does not compromise your security in any way. Once you set up your PC, you will be logging in to a lot of accounts anyway.

3) If anything happen to the Mircosoft Account will your PC get drag into it or get lock out?
Microsoft provides the necessary tools and options for you to recover your account. It is your responsibility to handle the recovery options correctly and ensure you don’t get locked out.
4) What if Microsoft monthly patch automactic turn on sync or turn on features that you don't even want and sync everything while you didn't even noticed. Well Microsoft tend to turn on things or even install app silently. Furthermore, Microsoft tend to enable every features by default whether sign in or not which a lot of people don't like it.
Every OS comes with a bunch of apps, tools and utilities. You can get rid of certain apps if you don’t need them and you can disable syncing.
 

jamey910111

Level 2
Jun 7, 2024
90
Microsoft gets blamed for not providing enough security. So then to counter this, it attempts to enforce use of a Microsoft Account (Entra ID) and forced Windows updates & upgrades, Microsoft Defender, Smart Application Control, S Mode, etc. Then it gets criticized for over-reach.

It should still offer users the easy option to instead use a local account during installation, however what all the various articles do not tell you is that forced Microsoft Account during install is to counter piracy.

How does this forced or sneaky usage of microsoft account increase security? And even if it did does it not inevitably introduce privacy related issues?

Scenario: Thief steals your computer - they deal with a local account with password or online account with password, so either way your things are secure, and there are a whole other ways like you can secure your computer in addition to having a login.
 

kailyn

Level 2
Jun 6, 2024
85
How does this forced or sneaky usage of microsoft account increase security? And even if it did does it not inevitably introduce privacy related issues?

Scenario: Thief steals your computer - they deal with a local account with password or online account with password, so either way your things are secure, and there are a whole other ways like you can secure your computer in addition to having a login.
If the thief gets your computer there is valuable data already on it, whether it is a local or active directory (Microsoft Account) managed account.

Arguments about privacy are irrelevant at this point. Nobody has privacy and nobody can achieve the kind of privacy that privacy nuts talk about unless the user disconnects and moves to an island lives off-grid.

If you want privacy then you need to use a privacy-focused Linux distro without creating online accounts or conducting business of any kind online. Otherwise, if you want to "do stuff" online you have no privacy and there's nothing you can do about it. Your data is being collected and tracked.
 
  • Like
Reactions: jamey910111

TairikuOkami

Level 37
Verified
Top Poster
Content Creator
Well-known
May 13, 2017
2,628
Scenario: Thief steals your computer - they deal with a local account with password or online account with password, so either way your things are secure
Local password can be bypassed within seconds, locally and remotely. MSA password can not be bypassed remotely, locally it is protected by PIN, you can remove it from trusted devices once stolen to block it completely. Even if you do not use bitlocker, all MSA related data is encrypted and protected in case someone would access the disk. MSA is not just a mere login, it is a key.
 
  • Like
Reactions: jamey910111

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top