Thanks for your suggestion
@JohnB
Should I create the SUA under "Your Family" or "Other Users"? Can I sign in using a Microsoft account in SUA?
I always create it under "Other Accounts" - a stand alone administrator account that you mainly use to control the machine and install programs, doesn't need to have a Microsoft email account associated it, so I always click on "Other Users", and then when it asks you for "How will this person sign in?" and wants and email address, look just below where you would put their email address and there is a blue link that says "I don't have this person's sign-in information". Click on that, and then you will get another screen that says "Create account". Look at the bottom of that screen and there is a option that says "Add a user without a Microsoft account". Click on this link and you can then just put in a user name and password, and give them administrator rights. Pick a user name is that is not obvious - don't use "Administrator". Use something else. I use "Installer".
I did this on my wife's computer, and especially my kids' laptops - and I don't let them know the Installer password. If they want to install any new programs on their laptops, they have to have me help them do it. Saves me the headache if they download something that will screw up their laptop. They always run as standard users now, and they don't care. They very rarely ever need me to user the Installer account to adjust anything on their computer. And they are just a little bit more protected in case they download a nasty virus or something.