Managing Local User Accounts on Windows

Local user accounts exist on the computer itself, independent of Active Directory or Microsoft accounts. They're useful for shared devices, emergency admin access, or non-domain computers. Manage them via Settings > Accounts > Family & other users, or via the Computer Management console (lusrmgr.msc) for more options. Every Windows machine should have at least one local admin account that's not the built-in Administrator (which is disabled by default). Create a local admin account with a strong, unique password and document it in your password manager — this is your break-glass access if the domain or Azure AD becomes unavailable. For domain-joined machines, avoid using local accounts for daily work — use domain accounts for centralized management, audit trails, and Group Policy application. The built-in Administrator account should remain disabled (it's a common attack target). For shared workstations without domain membership, create separate standard user accounts for each user rather than all sharing one admin account.