Prevent Users from Changing Passwords in Windows 11
Blocking password changes in Windows 11 stops standard users on a shared PC from updating their login details without approval. This restriction keeps family or work computers secure by leaving all password control to the main administrator.
Administrator accounts stay completely safe from this rule and can still change passwords whenever needed. You can set up this block using the Local Users and Groups tool (available on Windows 11 Pro and Enterprise) or the Command Prompt.
Prevent users from changing passwords by opening Local Users and Groups, right-clicking the user account, selecting Properties, and checking the “User cannot change password” box. This applies to Windows 11 Pro, Enterprise, and Education editions for local accounts.
Allow or prevent users from changing their passwords using Local Users and Groups.
Local Users and Groups lets you quickly prevent password change Windows 11 settings for specific accounts on your PC. Press the Win+R on your keyboard, type lusrmgr.msc into the box, and press Enter to open the management console where you can control user permissions.
Then type in the command below and press OK to open the Local Users and Group console.
lusrmgr.msc
When the console opens, select the Users folder on the left pane. On the right, select and right-click on the account you want to prevent changing their password and select the Properties command in the context menu .
On the account Properties window, check or uncheck the “User cannot change password” box to allow or disallow the user changing their password.
Click the OK button to save changes, then exit.
Allow or prevent users from changing their passwords via the command line
Command Prompt and Windows Terminal let you quickly prevent password change Windows 11 settings using a simple text command. Open your terminal with administrator rights and run a specific net user command to block or allow any local account from updating their sign-in credentials.
Launch Windows Terminal as administrator to begin.
Execute this command to restore password modification rights:
net user "user name" /PasswordChg:Yes
Example: Allow Grandma to change her password:
net user "Grandma" /PasswordChg:Yes
Block password modifications on an account by running this command:
net user "user name" /PasswordChg:No
Example: Disallow Grandma from changing her password:
net user "Grandma" /PasswordChg:No
That completes the process.
Conclusion:
- Users can easily manage password change permissions for standard accounts in Windows 11 using Local Users and Groups or the command line.
- Windows administrators can prevent standard users from changing their passwords, while users belonging to the administrator's group can override such restrictions.
- The step-by-step guide provides clear instructions for allowing or preventing users from changing their passwords ensuring security and access control on Windows 11 machines.
Was this guide helpful?
About the Author
Richard
Tech Writer, IT Professional
Richard, a writer for Geek Rewind, is a tech enthusiast who loves breaking down complex IT topics into simple, easy-to-understand ideas. With years of hands-on experience in system administration and enterprise IT operations, he’s developed a knack for offering practical tips and solutions. Richard aims to make technology more accessible and actionable. He's deeply committed to the Geek Rewind community, always ready to answer questions and engage in discussions.
No comments yet — be the first to share your thoughts!