How to Add Another User to Windows 11

Windows 11 makes it relatively straightforward to add new user accounts — but the process branches depending on whether you're adding a Microsoft account or a local account, whether the PC is on a home network or joined to a domain, and what level of access the new user should have. Understanding those branches before you start saves a lot of backtracking.

Why User Accounts Matter on a Shared PC

Every user account on Windows 11 gets its own isolated environment: separate desktop, files, browser profile, settings, and app preferences. This isn't just about privacy — it protects system stability. One user's misconfigured app or malware exposure is less likely to spill into another user's session when each account is properly separated.

Windows 11 supports two primary account types for new users:

• Microsoft account — tied to an email address, syncs settings and files to the cloud, enables access to the Microsoft Store and OneDrive
• Local account — exists only on the device, no cloud sync, no Microsoft login required

There's also an account role distinction that matters separately from the account type:

• Administrator — full control over system settings, software installation, and other user accounts
• Standard user — can use apps and change personal settings, but can't make system-wide changes without admin approval

Method 1: Adding a Microsoft Account User

This is the default path Windows 11 nudges you toward. You'll need to be signed in as an administrator.

1. Open Settings (Windows key + I)
2. Go to Accounts → Family & other users
3. Under Other users, click Add account
4. Enter the new user's Microsoft account email address
5. Follow the prompts — Windows will set up their profile on next sign-in

The new user will sign in with their Microsoft credentials. Their settings, OnedDrive files, and preferences can sync to this PC just as they would on any other device they use.

Family accounts work slightly differently. Under Family & other users, there's a separate section for adding family members — particularly useful for children's accounts, where you can apply screen time limits, content filters, and spending controls through Microsoft Family Safety.

Method 2: Adding a Local Account (No Microsoft Account Required) 🔑

Microsoft has made this path less obvious over time, but it still exists. A local account is useful when you want to add a user who doesn't have or doesn't want a Microsoft account, or when you're setting up a shared kiosk-style PC.

1. Open Settings → Accounts → Family & other users
2. Under Other users, click Add account
3. On the Microsoft sign-in screen, click I don't have this person's sign-in information
4. On the next screen, click Add a user without a Microsoft account
5. Enter a username, optional password, and security questions
6. Click Next to finish

The account is created immediately and will appear in the sign-in options on the lock screen.

Adjusting Account Permissions After Creation

Once a user is added, you can change their role at any time. To switch a standard user to administrator:

1. Go to Settings → Accounts → Family & other users
2. Click on the account name
3. Select Change account type
4. Choose Administrator or Standard User from the dropdown

Be deliberate here. Giving administrator access to someone who doesn't need it increases the attack surface of your system — one compromised admin account can affect every other account and system setting on the machine.

Domain-Joined and Work/School Accounts

If your PC is joined to an organization's domain — common in workplace environments — the process is different. IT administrators typically manage user provisioning centrally through tools like Active Directory or Microsoft Entra ID (formerly Azure AD). In that context, you may not have permission to add local accounts, or doing so may conflict with group policy settings.

For work or school accounts added to a personal PC (without full domain join), go to Settings → Accounts → Access work or school → Connect. This is distinct from adding a full sign-in account — it links organizational resources like email and SharePoint without creating a separate Windows login profile.

What Happens When a New User First Signs In 💻

The first sign-in for any new account takes slightly longer than usual. Windows is building the user's profile — creating their personal folders (Desktop, Documents, Downloads, etc.), applying default settings, and loading their environment. This is normal and only happens once.

Each user's files are stored separately under C:Users[username]. Users cannot access each other's files by default, though administrators can navigate the file system freely.

Variables That Shape Your Specific Setup

The "right" way to add a user depends on factors that vary from one situation to the next:

A household PC shared between adults with their own Microsoft accounts is a very different setup from a single shared login on a kid's PC, or a work laptop where IT controls provisioning. Each of those scenarios follows the same general steps — but the account type, role assignment, and management approach each lead somewhere different depending on what you actually need from that account.