The following are the step-by-step guides for separating Administrator and Standard User account. Please visit here for more information about the security measures.
- Separate Administrator and Standard User account
- For creating a new local administrator type account and changing current account to standard user type
- Logon at User Account Control prompt for Administrator access rights
- For allowing privilege escalation
A. Separate Administrator and Standard User account
Note: Steps below based on Windows 11 22H2
-
Select Accounts in Windows Settings
-
Select Other users
-
Select Add other users
-
Select I don't have this person's sign-in information
-
-
Select Add a user without a Microsoft account
-
● Enter a User Name (should be different from a HKUST Account)
● Enter a secure Password
● Re-enter the Password
● Complete Security questions
● Click Next -
● Select the new user just created
● Click Change account type
● Change Account type to Administrator
● Click OK
-
● Sign out the Windows and sign in with the new local administrator account just created
● Select Accounts in Windows Settings
● Expand the domain account (HKUST Account)
● Click Change account type in Account options
● Change Account type to Standard User
● Click OK
B. Logon at User Account Control prompt for Administrator access rights
-
● Enter an administrator type account and password to continue
● Note: As the administrator type account created in part A above is a local account, please enter .\ before the username e.g. .\cchelp
