The Windows 10 operating system allows for computer administrators to create secondary accounts for other users on the system. Each additional user is granted a unique username, password, and profile. Administrators also have the power to temporarily or permanently disable a local user account, which will block that individual from being able to log in or remotely connect to the computer. This process is completed in the “Computer Management” admin tool.

Step 1:


Log on to your PC with an account that has administrative privileges. Lower-level accounts do not have permission to view user details or disable other users.

Step 2:

Open the Start menu in the lower-left corner of the screen and expand the “All Apps” list.

Step 3:

Scroll down through the list of applications and expand the “Windows Administrative Tools” folder.

Step 4:

Click on the “Computer Management” row to launch the admin tool for managing local user accounts.

Step 5:

Look under the “System Tools” section of the left navigation bar and then highlight the row labeled “Local Users and Groups.”

Step 6:

Double-click on the “Users” folder. The tool will now display a list of all the local user accounts set up on the computer. Any account with a downward arrow icon next to its name is currently disable. All others are active and enabled.

Step 7:

Right-click on the name of the account you want to disable and choose “Properties” from the contextual menu that appears. A pop-up window will open with various account options to modify.

Step 8:

Check the box next to “Account is disabled” and then click “OK” or “Apply” to save the change. The owner of the selected account will now be unable to log in to Windows 10.

Keep in mind that this process can be reversed at any time to re-enable a secondary user’s account. The “Computer Management” tool can also be used to configure password expiration policies and to help with account lockouts. The Windows IT Pro Center has more documentation about the admin tools available in Windows 10.