Prevent Users from Changing Passwords in Windows 11
Blocking password changes in Windows 11 stops standard account holders on a shared PC from updating their login details without approval from an administrator. This restriction keeps shared family computers or work PCs secure by leaving all password control in the hands of the main administrator.
Administrator accounts stay completely safe from this rule and can still change passwords whenever needed. You can set up this block using either the Local Group Policy Editor on Windows 11 Pro and Enterprise editions, or the Command Prompt on Windows 11 Home.
Prevent users from changing passwords by opening Local Users and Groups, right-clicking the user account, selecting Properties, and checking the “User cannot change password” box. This applies to Windows 11 Pro, Enterprise, and Education editions for local accounts.
Allow or prevent users from changing their passwords using Local Users and Groups.
Managing password restrictions takes only a few clicks through the management console or a quick terminal command. Press the Windows key + R shortcut to open the Run command box, type lusrmgr.msc, and press Enter to launch the Local Users and Groups snap-in.
Then type in the command below and press OK to open the Local Users and Group console.
lusrmgr.msc
When the console opens, select the Users folder on the left pane. On the right, select and right-click on the account you want to prevent changing their password and select the Properties command in the context menu.
On the account Properties window, check or uncheck the “User cannot change password” box to allow or disallow the user changing their password.
Click the OK button to save changes, then exit.
Allow or prevent users from changing their passwords via the command line
Alternatively, Windows Terminal works alongside the Command Prompt tab for executing these adjustments via command line.
Launch Windows Terminal as administrator to begin.
Execute this command to restore password modification rights:
net user "user name" /PasswordChg:Yes
Example: Allow Grandma to change her password:
net user "Grandma" /PasswordChg:Yes
Block password modifications on an account by running this command:
net user "user name" /PasswordChg:No
Example: Disallow Grandma from changing her password:
net user "Grandma" /PasswordChg:No
That completes the process.
Conclusion:
- Users can easily manage password change permissions for standard accounts in Windows 11 using Local Users and Groups or the command line.
- Windows administrators can prevent standard users from changing their passwords, while users belonging to the administrator's group can override such restrictions.
- The step-by-step guide provides clear instructions for allowing or preventing users from changing their passwords ensuring security and access control on Windows 11 machines.
Was this guide helpful?
About the Author
Richard
Tech Writer, IT Professional
Richard, a writer for Geek Rewind, is a tech enthusiast who loves breaking down complex IT topics into simple, easy-to-understand ideas. With years of hands-on experience in system administration and enterprise IT operations, he’s developed a knack for offering practical tips and solutions. Richard aims to make technology more accessible and actionable. He's deeply committed to the Geek Rewind community, always ready to answer questions and engage in discussions.
No comments yet — be the first to share your thoughts!