Prevent Users from Changing Passwords in Windows 11
Preventing standard users from changing their passwords in Windows 11 gives administrators control over account security.
This restriction stops users with standard accounts from altering their login password without administrator approval.
Normally, anyone can change their own password. However, Windows 11 offers a way for administrators to block this for standard accounts. This is useful for shared computers or environments where password changes need oversight.
This setting only affects standard user accounts. Users with administrator privileges can always change their passwords and can also remove this restriction if needed.
Prevent users from changing passwords by opening Local Users and Groups, right-clicking the user account, selecting Properties, and checking the “User cannot change password” box. This applies to Windows 11 Pro, Enterprise, and Education editions for local accounts.
Allow or prevent users from changing their passwords using Local Users and Groups.
To manage password change permissions, use Local Users and Groups. This tool, accessible via the command lusrmgr.msc, lets you prevent a standard user from changing their account password.
To do that, press the Windows key + R shortcut to open the Run command box. Then type in the command below and press OK to open the Local Users and Group console.
lusrmgr.msc
When the console opens, select the Users folder on the left pane. On the right, select and right-click on the account you want to prevent changing their password and select the Properties command in the context menu.
On the account Properties window, check or uncheck the "User cannot change password" box to allow or disallow the user changing their password.
Click the OK button to save your changes, then exit.
Allow or prevent users from changing their passwords via the command line
Alternatively, you can use Windows Terminal with the Command Prompt tab to run the commands below to allow or disable a user changing their password.
To do that, open Windows Terminal as administrator.
Then, run the command below to allow users to change their passwords.
net user "user name" /PasswordChg:Yes
Example: Allow Grandma to change her password:
net user "Grandma" /PasswordChg:Yes
To prevent a user from changing their password, run the command below:
net user "user name" /PasswordChg:No
Example: Disallow Grandma from changing her password:
net user "Grandma" /PasswordChg:No
That should do it!
Conclusion:
- Users can easily manage password change permissions for standard accounts in Windows 11 using Local Users and Groups or the command line.
- Windows administrators can prevent standard users from changing their passwords, while users belonging to the administrator's group can override such restrictions.
- The step-by-step guide provides clear instructions for allowing or preventing users from changing their passwords ensuring security and access control on Windows 11 machines.
Was this guide helpful?
About the Author
Richard
Tech Writer, IT Professional
Richard, a writer for Geek Rewind, is a tech enthusiast who loves breaking down complex IT topics into simple, easy-to-understand ideas. With years of hands-on experience in system administration and enterprise IT operations, he’s developed a knack for offering practical tips and solutions. Richard aims to make technology more accessible and actionable. He's deeply committed to the Geek Rewind community, always ready to answer questions and engage in discussions.
No comments yet — be the first to share your thoughts!