How to Prevent Users from Changing Passwords in Windows 11

This guide explains how to control whether standard users can change their own passwords on a Windows 11 computer.

Why do this? You may want to ensure a user account remains secure or keeps a specific password for administrative reasons.

What happens when done? The user will no longer be able to update their password through the standard Windows settings menu.

By default, all users on a Windows machine can change their own passwords. A Windows administrator can change any account password, but a standard user can only change their own. Note: This only works for a local account. If a user is part of the administrator group, they can easily remove these restrictions. This method does not apply to Microsoft Accounts, which are managed online.

Comparison of Methods

Method 1: Using Local Users and Groups (Pro/Enterprise Only)

Requirement: You must have administrator privileges to perform these steps.

1. Press Windows key + R, type lusrmgr.msc, and press Enter.

2. Click the Users folder on the left.
3. Right-click the target account and select Properties.

4. Check the box labeled User cannot change password.
5. Click OK to save.

Method 2: Using the Command Prompt (All Editions)

Requirement: You must run the command prompt as an administrator.

Open the Start menu, type cmd, right-click it, and select Run as administrator.

To stop a user from changing their password, type this command and press Enter:

net user "username" /PasswordChg:No

To allow it again, use:

net user "username" /PasswordChg:Yes

Method 3: Using Group Policy Editor (Pro/Enterprise Only)

Requirement: You must have administrator privileges.

For network-wide settings, use gpedit.msc. Navigate to Computer Configuration\Windows Settings\Security Settings\Account Policies\Password Policy. Here you can set Maximum password age to prevent expiration issues.

Troubleshooting and Reverting Changes

If you get locked out, log in with an administrator account. Use the same steps above to uncheck the restriction or run net user "username" /PasswordChg:Yes to restore access.

Summary

You can restrict password changes for standard users in Windows 11 using the Local Users and Groups console or the Command Prompt. These steps help maintain control over account security, though remember that users with administrative rights can bypass these changes. Always ensure you have an active administrator account before applying these restrictions to avoid being locked out of your own system.” }