How to Allow or Stop a User from Changing Their Password in Windows 11
Windows 11 password restriction settings let you control whether standard user accounts can change their own passwords on your PC. This security feature stops other people who share your computer from changing account keys without permission.
You need an administrator account to turn on this restriction for local accounts. Keep in mind that Microsoft accounts require online password resets through the main Microsoft website instead of local PC settings.
To prevent a user from changing their password, use the “User cannot change password” checkbox in the user’s Properties via lusrmgr.msc (Pro/Enterprise/Education) or the `net user /PasswordChg:No` command in Windows Terminal (Admin). To allow changes, uncheck the box or use `PasswordChg:Yes`.
Method 1Use Local Users and Groups (For 🪟 Windows 11 Pro, Enterprise, or Education)
To stop or allow a specific user to change their password in Windows 11 Pro, Enterprise, or Education, use the Local Users and Groups tool. This method lets you manage password change permissions for individual accounts directly on your computer.
- Press Win+R to open the Run box, type
lusrmgr.msc, and press Enter. - Click on the Users folder on the left side.
- Find the user account you want to change in the middle list. Right-click it and select Properties, or just double-click the user name.
- In the General tab, check the box that says User cannot change password to stop the user from changing their password. Uncheck it to allow password changes again.
- Click OK to save.
Method 2Use Command Prompt or Windows Terminal
Allowing or stopping a user from changing their password in Windows 11, including the Home edition, can be done using the Command Prompt or Windows Terminal. This approach uses specific commands to adjust password change permissions.
Type the command below depending on your desired outcome, and press Enter:
To allow the user to change their password (default):
net user "<username>" /PasswordChg:Yes
To stop the user from changing their password:
net user "<username>" /PasswordChg:No
Replace 'username' with the actual user's name. For example, to stop user "genericuser" from changing their password, type:
net user "genericuser" /PasswordChg:No
When finished, the terminal window can be closed.
Summary
- Why do this? Control who can change their password on Windows 11 to help keep your PC secure.
- What happens? Users you block will not be able to change their passwords. This works only for standard users, not administrators.
- Use Local Users and Groups if you have Windows 11 Pro or above, or use commands in Windows Terminal to make the changes.
- Always be signed in as an administrator to change these settings.
- Check your user accounts regularly to keep your PC secure.
Restricting password changes adds an extra layer of security, particularly on shared computers.
Was this guide helpful?
About the Author
Richard
Tech Writer, IT Professional
Richard, a writer for Geek Rewind, is a tech enthusiast who loves breaking down complex IT topics into simple, easy-to-understand ideas. With years of hands-on experience in system administration and enterprise IT operations, he’s developed a knack for offering practical tips and solutions. Richard aims to make technology more accessible and actionable. He's deeply committed to the Geek Rewind community, always ready to answer questions and engage in discussions.
No comments yet — be the first to share your thoughts!