User password for privilege settings

Question

Hi,

I want to set up a password for a non-admin user account in my Windows 11 Laptop but just to be able to make admin changes.

When the non admin user account tries to install a software, and I'm not at my place I need to provide the admin user PIN to allow the change, with that same PIN they are able to access the admin user if they want to, Can I create a password for them to be able to modify or install any software when I allow it without giving the main admin password?

Answer 1

Thanks for reaching out! My name is, Zadee. I'm an Independent Advisor and a Microsoft user like you. I'll be glad to help you today.

That's not possible, creating a password for the non admin user under your admin account. Standard users would have to use your admin PIN or user/pass to get approval for any changes in the profile. Or you can create another user profile that is also an Admin but specifically for that person you want to handle Admin tasks.

Hope that info helps.

Best Regards,

Answer 2

In Windows 11, you can set up a password for a non-admin user account and allow them to make changes that require administrator privileges, without giving them access to the main admin account. This is typically referred to as "elevated privileges" or "admin approval mode."

Here's how you can set this up:

1. Log in to the computer with an administrator account.
2. Click on the Start button, and then click on Settings.
3. In the Settings app, click on Accounts.
4. In the Accounts settings, click on Family & other users.
5. Select the non-admin user account that you want to set up a password for, and then click on Change account type.
6. Under Account type, select Standard user, and then click on OK.
7. Click on the non-admin user account that you just changed, and then click on Change sign-in options.
8. Click on the Create a password button, and then enter and confirm a password for the non-admin user account.

Once you have done this, the non-admin user will need to enter the password that you have just set up, in order to perform actions that require elevated privileges. Additionally, you can setup UAC (User Account Control) to prompt for an admin PIN or password when the user tries to perform a task that requires administrator rights, this can prevent the non-admin user from accessing the administrator account.

Please note that this feature only prevents the non-admin user from logging in as the administrator, it won't prevent them from installing software or make changes that require administrator rights. To do that you need to use other features like group policy, or setting up software restriction policies.