How to Create and Set Up a Local User Account
In addition to the initial account, you can also add a new local account in Windows 11 for specific purposes. Here are the steps:
1. Create a Local Account
- Open Settings > Accounts > Family & other users.
- Select the Add someone else to this PC option.
- Click I don’t have this person’s sign-in information, then select Add a user without a Microsoft account.
- Enter your username, password, and security questions.
2. Setting Account Permissions
- Once the account is created, you can turn it into an administrator account through the Change account type option.
- Select Administrator to grant privileges or leave them as Standard User for limited access.
Password and Configuration Policy
To ensure the security of local accounts, password policies can be applied using Group Policy or Microsoft Intune. Some of the settings that can be applied include:
1. Group Policy
- Press Win + R and type gpedit.msc to open the Group Policy Editor.
- Navigate to Computer Configuration > Windows Settings > Security Settings > Account Policies > Password Policy.
Set policies such as:
- Minimum password length: The minimum length of the password (for example, 8 characters).
- Password must meet complexity requirements: Passwords must contain a combination of uppercase letters, lowercase letters, numbers, and symbols.
2. Microsoft Intune
Use the Intune portal to centrally manage password policies across managed devices.
Apply policies such as:
- Force password changes every 90 days.
- Prevent the reuse of old passwords.
3. Microsoft Account
Microsoft Account are user accounts that are directly connected to Microsoft cloud services, such as Outlook, OneDrive, and Office 365. This account is used to manage your devices personally, allowing you to sync your settings, apps, and data across your Windows 11-based devices.
Advantages of Using a Microsoft Account
The use of Microsoft Account offers a variety of advantages, especially for users who need greater accessibility and productivity. Some of its advantages include:
1. Sync Between Devices
Microsoft Account allows settings, files, and apps to remain consistent across devices. For example, if you change your wallpaper or download an app on one device, these changes will automatically apply to other devices that use the same account.
2. Access to Microsoft Services
With this account, you get access to a wide range of services such as:
- OneDrive for cloud storage.
- Office 365 for productivity.
- Windows Store to download apps and games.
3. Enhanced Security
Microsoft Account supports security features such as:
- Two-factor authentication (2FA) for added protection.
- Easier account recovery with a registered email or phone number.
4. Integration with Microsoft Cloud
These accounts are directly connected to Microsoft’s cloud ecosystem, allowing for better data management and a seamless user experience.
Data Sync with the Microsoft Cloud
One of the main advantages of using a Microsoft account is the ability to sync data with the Microsoft cloud. With this account, all user settings, such as themes, Wi-Fi passwords, and app preferences, can be stored in the cloud.
This means that when a user logs into a new device or after reinstalling the operating system, they can easily restore all those settings. This sync also includes important data such as documents stored in OneDrive, so users can access their files from anywhere and anytime.
Combination of Microsoft Account with On-premises Account and Azure AD
Microsoft Account can also be combined with a Local User Account or Azure AD to meet more complex administrative needs. This combination provides additional flexibility and security in an enterprise environment:
1. Local User Account + Microsoft Account
Users can create a local account on the device and then link it with a Microsoft Account. This allows cloud data synchronization without the need to change the device’s primary account type.
2. Azure AD + Microsoft Account
In an enterprise environment, Microsoft Accounts can be used in conjunction with Azure Active Directory (Azure AD) to provide access to cloud-based applications such as Office 365. Administrators can configure devices to support hybrid logins, so users can use Azure AD credentials with the Microsoft Account sync feature.