How to Allow or Stop a User from Changing Their Password in Windows 11
Controlling password change for Windows 11 users involves specific steps. These instructions apply to both local accounts, stored only on your PC, and Microsoft accounts, which use an email address with Microsoft services.
Microsoft account users in Windows 11 cannot change their passwords directly on their PC. These Microsoft account users must visit the official Microsoft password reset page online to reset their password. This online password reset affects account access on all linked devices.
Standard users can be prevented from changing their passwords in Windows 11. Administrator accounts cannot be directly blocked from changing passwords. To block an administrator account, first change the account type to standard user, then block the password change, and finally switch the account back to administrator.
Administrator Sign-In is Required: To make changes in Windows 11, users must sign in using an administrator account. This administrator role grants the necessary permissions to manage user settings, including password restrictions. Without administrator privileges, Windows 11 will not allow the requested modifications.
To prevent a user from changing their password, use the “User cannot change password” checkbox in the user’s Properties via lusrmgr.msc (Pro/Enterprise/Education) or the `net user /PasswordChg:No` command in Windows Terminal (Admin). To allow changes, uncheck the box or use `PasswordChg:Yes`.
Method 1Use Local Users and Groups (For 🪟 Windows 11 Pro, Enterprise, or Education)
You can stop or allow a specific user from changing their password in Windows 11 Pro, Enterprise, or Education using the Local Users and Groups tool. This method lets you manage password change permissions for individual accounts directly on your computer.
- Press Windows key + R to open the Run box, type
lusrmgr.msc, and press Enter. - Click on the Users folder on the left side.
- Find the user account you want to change in the middle list. Right-click it and select Properties, or just double-click the user name.
- In the General tab, check the box that says User cannot change password to stop the user from changing their password. Uncheck it to allow password changes again.
- Click OK to save.
Method 2Use Command Prompt or Windows Terminal
You can allow or stop a user from changing their password in Windows 11, including the Home edition, by using the Command Prompt or Windows Terminal. This method uses simple commands to adjust password change permissions.
Type the command below depending on your desired outcome, and press Enter:
To allow the user to change their password (default):
net user "<username>" /PasswordChg:Yes
To stop the user from changing their password:
net user "<username>" /PasswordChg:No
Replace <username> with the actual user name. For example, to stop user “genericuser” from changing their password, type:
net user "genericuser" /PasswordChg:No
When finished, the terminal window can be closed.
Summary
- Why do this? Control who can change their password on Windows 11 to help keep your PC secure.
- What happens? Users you block will not be able to change their passwords. This works only for standard users, not administrators.
- Use Local Users and Groups if you have Windows 11 Pro or above, or use commands in Windows Terminal to make the changes.
- Always be signed in as an administrator to change these settings.
- Check your user accounts regularly to keep your PC secure.
Windows 11 password control keeps your PC secure. Blocking specific users prevents those users from changing their passwords. This restriction applies only to standard users, not administrators. For Windows 11 Pro, use Local Users and Groups to control password changes. For other Windows 11 versions, use command-line tools.
Was this guide helpful?
About the Author
Richard
Tech Writer, IT Professional
Richard, a writer for Geek Rewind, is a tech enthusiast who loves breaking down complex IT topics into simple, easy-to-understand ideas. With years of hands-on experience in system administration and enterprise IT operations, he’s developed a knack for offering practical tips and solutions. Richard aims to make technology more accessible and actionable. He's deeply committed to the Geek Rewind community, always ready to answer questions and engage in discussions.
No comments yet — be the first to share your thoughts!