If you are not the only user of your Windows computer, it is best to create a separate account for each user (family members, for example). This keeps each user's documents and settings, as well as Internet browsing history, entered searches and user names private. There will be much less clutter in private folders, such as My Documents, My Pictures, etc.
To share documents, pictures, videos and other files between users, use the Shared Documents (in Windows XP) or Public Documents (Windows Vista, 7 and 8) folder as all users have access to the folder and its subfolders.
There are generally three types of user account in Windows:
- Administrators - full access to everything. Administrators can install and uninstall programs, change system settings, add, manage and remove other user accounts and manage security policies.
- Limited or Standard users - limited access. Users can manage their documents and program settings, but they cannot add or remove programs or other users, change system files and settings or manage security. If you need to perform an administrative task without logging off the current user, select the Run As (in Windows XP) or Run as administrator (Windows Vista, 7 and 8) from right-click menu, or in Windows Vista, 7 and 8, rely on User Account Control that asks for administrator's password for performing administrative tasks.
- Guests - limited access. Guest account is for people who do not really need a personal user account, such as your friends or visitors who need to check their webmail or social network account quickly. Guests have no access to files and folders of password-protected users, and are unable to install or uninstall programs, manage user accounts, or perform any administrative tasks. The account still has read and write access to Shared Folders / Public Folders, so do not keep sensitive files in these folders!
Guest account is turned off by default.
There should be only one administrator account on a computer. This administrator is fully responsible for computer configuration and all software on it. All other users should have limited access to system settings.
For example, in a family father or mother (whoever knows more about computers) should be the administrator and all other family members (especially kids!) should have standard user accounts. Children tend to be overly curious and they often forget about essential security while downloading programs, visiting potentially malicious web sites and changing system settings - so keep their accounts limited.
If you are planning to run scheduled tasks (such as backups) and you change your password regularily, you may want to create a special administrator account without password expiration. Select a cunning name for the account: Admin, Root, Backup, Boss or anything similar is not good as these are the names that attackers always try to find and break first; try something completely irrelevant instead, such as Lemonade, MathChick, Earphones.
Keep administrator's password private, never share it with other family members or other people - sharing a password would ruin all security efforts! Read the Creating strong passwords article to learn about creating and remembering strong passwords.
To change your own account password, see the instructions in Creating strong passwords article.
The built-in Administrator account in Windows
To make things a little fuzzier, there is already an account named "Administrator" on every Windows computer - so you cannot create an account with name "Administrator", just use your name instead.
The account is disabled in Windows Vista, 7 and 8 and you cannot use it for anything. In Windows XP it is enabled, but does not show up on Welcome Screen. In all cases, the Administrator account has a blank password by default. Luckily, Windows does not allow remote logins or using the Run as / Run as administrator command with blank passwords, so your computer cannot be hijacked with the account.
You should leave the built-in Administrator account as it is. Do not try to enable or start using it, or change its password. In Windows XP, the account only appears while starting Windows in Safe Mode.
If you do forget the password of your own administrator account and you have no other administrators on the PC, try using the Offline Password & Registry Editor on www.winhelp.us Data Recovery CD/USB.
Creating new users in Windows
To add a user account, open Start menu or Start screen by pressing Ctrl+Esc or Windows Key on your keyboard or by clicking the Start button.
In Windows XP, open Control Panel.
In Windows Vista and 7, type "user" into Start menu Search box and click User accounts.
In Windows 8, use keyboard shortcut Windows Key+W to open Settings Search. Type "users" into Search box and click Users in search results.
In Windows XP, click User Accounts.
In Windows Vista and 7, Make changes to your user account window opens. Click Manage another account.
Windows Vista will, of course, greet your action with User Account Control. Click Continue.
In Windows 8, the new Metro-style PC settings app opens in Users tab. Find the Other users section on the right and click Add a user.
In Windows 8, there are two options for sigining in - the traditional local user (Local account) or the new semi-online user (Microsoft account, aka Windows Live ID). The latter offers several benefits, such as syncing personalization settings (account picture, Windows colors, etc) and Internet Explorer favorites and history. You must be connected to the Internet to log on with Microsoft account for the first time on a device.
You can switch account type later if you want to.
First, let's see how to create a traditional account.
Click here to show or hide instructions for creating a local account in Windows 8To create a new local account for a user, click Sign in without a Microsoft account.
The There are two options for signing in screen will list differences between Microsoft accounts and Local accounts. Click Local account.
Now enter User name, password and password hint. Make sure you create a strong, memorable passphrase.
Please use a good password hint and please remember it cannot be your password. For example, when you specify "M@tt+daM0n89" for the new password, use "Your favorite actor and some number" as a password hint. Remember not to make the hint too obvious as anyone can see it on Welcome Screen after entering a wrong password.
Then click Next.
Finally, click Finish. The new account has standard rights, but you can make it an administrator as described later in this article.
Second, let's see how to create a new user with Microsoft account.
Click here to show or hide instructions for creating a Microsoft account in Windows 8To create a new user with Microsoft account, enter the person's e-mail address that he or she uses to sign in to Microsoft/Windows Live services, such as Hotmail, Xbox, SkyDrive or Windows Live Messenger.
If the user does not have Microsoft account, he/she can connect any other existing e-mail address (this does not need to be a Hotmail address) or you can click the Sign up for a new email address link and create a new one for him or her.
Click Next.
The new account has standard rights, but you can make it an administrator as described later in this article. Click Finish and remember your computer must be connected to the Internet to sign in with the new account for the very first time.
The last thing to do is to check e-mail account's Inbox and click the link below "Use this link to confirm <device name> as a trusted PC". This enables syncing personalization settings and Internet Explorer favorites and history on this computer.
If the new account is just a temporary one and is not on your device, click the cancel link instead.
Finally for Windows 8, let's see how to switch user account type. You can only switch your own account type.
Click here to show or hide instructions for converting Windows 8 local accounts to Microsoft accounts and vice versaTo convert your Microsoft account to a local account, click Switch to a local account in PC settings, Users tab. First, close all running programs and save all open documents. Use keyboard shortcut Alt+Tab to switch between running Desktop programs and keyboard shortcut Windows Key+Tab to switch between open Metro apps.
Enter your current password and click Next.
Specify a local user name. Then type password and password hint for the account. Please remember that password reuse is very dangerous in case any of your account gets hacked, so specify a new one here.
Please use a good password hint and please remember it cannot be your password. For example, when you specify "M@tt+daM0n89" for the new password, use "Your favorite actor and some number" as a password hint. Remember not to make the hint too obvious as anyone can see it on Welcome Screen after entering a wrong password.
Click Next.
Finally, click Sign out and finish to complete the account switching process.
To convert your local account to Microsoft account, click the Switch to a Microsoft account button in Users tab of PC settings app.
Enter the e-mail address you use for Microsoft services, such as Hotmail, Xbox, SkyDrive or Windows Live Messenger. If you do not have a Microsoft account yet, enter any of your existing e-mail addresses instead.
Click Next.
If you specified an existing Microsoft account, type the account's password and click Next.
In case your Microsoft account has no security verification info, it is strongly recommended to enter it here. This will be really helpful if your account is hacked or you are not able to access it.
And that's it - your Windows 8 account is now a Microsoft account. Click Finish.
You can continue working, but use your Microsoft account e-mail address and password to sign in/log in the next time.
In Windows XP, Vista and 7, click Create a new account.
Type a user name for the new account. Usually, first name is sufficient.
In Windows XP, click Next.
In Windows Vista and 7, select if the user should be a Standard user or an Administrator. In most cases, leave Standard user selected. Remember, there should be only one user with administrative rights on a computer! Then click Create Account.
In Windows XP, select the account type and click Create Account. Again, Limited is preferred here.
But we are not done yet! 
As you probably noticed, Windows XP, Vista and 7 did not ask for password for the new account. This is bad, every account must be password-protected. Let's create a password for the new account now. Again, remember to follow the guidelines for creating strong passwords.
Click on the new account under in the "pick an account to change" (Windows XP) or "choose the account you would like to change" (Windows Vista and 7) section.
Click Create a password.
Type the new password into two first boxes - New password and Confirm new password. Also type in something for password hint to help user remember the password in case he/she forgets it. Just do not type the password itself! Use some words that describe the password. For example, when you specify "M@tt+daM0n89" for the new password, use "Your favorite actor and some number" as a password hint. Remember not to make the hint too obvious as anyone can see it on Welcome Screen by clicking the Password hint (blue button with white question mark) button (in Windows XP) or entering a wrong passphrase (Windows Vista and 7).
As we are setting a password for a brand new user, there is need to worry about losing his/her EFS-encrypted files, certificates or stored passwords.
Click the Create password button.
And this is what a password hint looks like on Welcome Screen. In Windows 8, password hints are displayed for local user accounts only, no hints are available for Microsoft accounts.
To change your own account password, see the instructions in Creating strong passwords article.
Changing existing user's account type in Windows - from standard to administrator or the other way round
When you need to turn a limited/standard user to an administrator (or vice versa), open Start menu by pressing Ctrl+Esc or Windows Key on your keyboard.
In Windows XP, open Control Panel, click User Accounts and then click Change an account.
In Windows Vista and 7, type "user" into Start menu Search box, click User accounts and then click Manage another account.
In Windows 8, open Settings search using keyboard shortcut Windows Key+W. Type "users" into Search box and click Change account type in the second row of results. This will open traditional Control Panel in Desktop environment.
Next, click the account you want to change.
Click Change the account type.
Select the account type you want and click Change Account Type button.
Deleting user accounts in Windows
If you need remove a user account, open Start menu by pressing CTRL+ESC or WINDOWS KEY on your keyboard.
In Windows XP, open Control Panel, click User Accounts and then click Change an account.
In Windows Vista and 7, type "user" into Start menu Search box, click User accounts and then click Manage another account.
In Windows 8, open Settings Search using keyboard shortcut Windows Key+W, type "remove user" into Search box and click Remove user accounts in the results. This will again open traditional Control Panel.
Next, click the account you want to erase.
Click Delete the account.
Windows offers an option to save the user's files and Desktop contents to a folder on your Desktop before deleting the account. This might come in handy sometimes, but remember that no program settings or e-mails will be stored in the folder.
If you want to keep user's files, click Keep Files. If not, click Delete Files.
Windows now asks if you are really-really sure you want to remove the user account. Click Delete Account to confirm.
Running programs as a different user in Windows
Sometimes you need to open a program or an item as an administrator without logging off the current limited user. The easiest way to do it for programs is to right-click an item and select Run as... (in Windows XP) or Run as administrator (in Windows Vista, 7 and 8). This is sometimes called running a program with elevated rights.
If you see no pop-up menu after right-clicking on an item on Start menu, the user has disabled context menus on Start menu.
Windows XP users should read this article about how to turn the "Enable dragging and dropping" option on.
Windows Vista users should read this article about how to turn the "Enable context menus and dragging and dropping" option on.
Windows 7 users should read this article about how to turn the "Enable context menus and dragging and dropping" option on.
In Windows XP, Run As window opens. Click to activate the The following user option, type in a User name with administrative rights, enter the account's Password and click OK.
In Windows Vista, 7 and 8, User Account Control window opens. If there is only one administrator account available (as recommended), the name will be selected by default. Else, select the appropriate account from the list. Type in the account's Password and click OK (in Windows Vista) or Yes (Windows 7 and 8).
If the password was correct, the program now launches with administrative rights. If the password was not correct, retype the password in User Account Control prompt.
Please note that Windows Vista, 7 and 8 warn about programs that have no digital signature. You can click the Details button to check if it really is the correct program. In case everything's fine, type in the administrator's password and click OK or Yes.
Windows Vista, 7 and 8 are smart enough to ask for administrator password for performing administrative tasks while a standard user is logged on. You can use Start menu Search box or Start screen Search apps for finding administrative tasks. After clicking on a task that requires administrator rights, a User Account Control window will pop up.
That's it - just remember to close the window opened with administrator rights after performing your tasks, otherwise a standard user might gain access to system configuration!
Limited users on Windows XP have no such password prompts and they should use the runas command.
Using the runas command in Windows
If you need to run Control Panel with administrative rights, open Start menu by pressing Ctrl+Esc on your keyboard or by clicking the Start button.
In Windows XP, click the Run... command. The alternative (and sometimes quicker) way is to use keyboard shortcut WINDOWS KEY+R to open the Run dialog.
Then type runas /user:<administrator name> control into Open field (Windows XP) or Start menu Search box. Replace <administrator name> with the name of an administrator account - "mirjam" in this example. The capitalization does not matter in this case. Note that there is no space after colon.
Press Enter key to run the command.
A command prompt window opens asking for the account's password. Type it in and press Enter key to start Control Panel.
If the password was correct, Control Panel opens. After completing operations as an administrator, always close the open window(s) to prevent standard users from accessing administrative tasks.
Managing the Guest account in Windows
The Guest account in Windows is disabled by default. Despite the fact that it is an account with limited rights, it still has full access to Shared / Public Folders and this might pose a problem for some. Another issue with Guest account is that it has no password and it cannot be changed easily in Home versions of Windows.
But the account is still very useful if your friends need to check their Facebook or webmail accounts while visiting you. There is no need to create separate accounts for people who do not use the computer often.
To turn Guest account on or off, open Start menu by using the CTRL+ESC keyboard shortcut.
In Windows XP, open Control Panel and click User Accounts.
In Windows Vista and 7, type "user" into Start menu Search box, click User accounts and then click Manage another account.
In Windows 8, use keyboard shortcut Windows Key+W to open Settings Search, type "guest" into Search box and click Turn guest account on or off.
The current status of the Guest account is displayed as "Guest account is off" or "Guest account is on" in Windows XP; in Windows Vista and 7 it just displays the "Guest account is off" message.
To enable the account, click its name.
Click the Turn On the Guest Account (Windows XP) or Turn On (Windows Vista and 7) button to unlock the account.
The visitors' account is now active. Remember, it has no password and you cannot change this the way you reset other users' passwords.
If you need to disable the account later, open User Accounts in Control Panel, click Guest account and then click Turn off the guest account. The action will not be confirmed.
Changing Guest account password in Windows
Having the Guest account turned on without password protection is often a bad idea. Windows does not let you change the password easily - mainly to prevent some ill-humored visitor from resetting it.
In Home versions of Windows, you need to use an old-time trick to set a passphrase for Guest. In Professional, Ultimate and other advanced versions of Windows, you can open Computer Management console and reset the account's password there.
First, make sure you are logged on with an account that has administrative rights.
In Windows XP, open Run dialog using keyboard shortcut Windows Key+R, type "cmd" into Open field and click OK.
In Windows Vista and 7, type "cmd" into Start menu Search box, right-click cmd.exe and click Run as administrator.
In Windows 8, open Start screen and type "cmd" - Search pane opens automatically (you can also open Search pane using keyboard shortcut Windows Key+Q). Right-click Command Prompt and click Run as administrator in App bar.
This opens a Command Prompt window. In Windows Vista, 7 and 8, this is also known as elevated command prompt - you need administrator's rights to perform the following task.
Type in the following command: net user guest *
Press Enter to run it.
You will see a "Type a password for the user:" prompt, type a new password and press Enter key.
A "Retype the password to confirm:" prompt will follow, repeat the new password and press Enter.
If passwords matched, you will see the "The command completed successfully" message. Close the Command Prompt window by click the X mark on the top right.
To empty the password, do not type anything in the password prompts and just press Enter.
