Free tools Windows power users keep installed
One-click scans. No signup required.
Windows 11 has separate controls for account type, file and folder access, and app permissions. To let someone make system-wide changes, change their account from Standard user to Administrator; to control access to a particular folder, adjust its NTFS permissions; and to manage supported app capabilities, use Settings > Privacy & security.
These controls are separate: a Microsoft account is not automatically an administrator, changing UAC settings does not change account membership, and making a user an administrator is not the same as granting an app access to a folder.
Choose the permission you need
| Goal | Windows 11 setting or command |
|---|---|
| Allow a person to install programs and approve administrative changes | Settings > Accounts > Other users > Change account type |
| Allow or deny access to a specific file or folder | NTFS Security settings or the icacls command |
| Control microphone, camera, location, or similar app access | Settings > Privacy & security |
| Control how often Windows asks for elevation approval | Control Panel > System and Security > Change User Account Control settings |
| Check the signed-in user and group memberships | whoami, whoami /groups, or whoami /all |
Change a user from Standard to Administrator
This changes the Windows account type. Microsoft recommends limiting the number of administrators and using a standard account for everyday work. Administrators can change settings, install software, and access all files.
- Sign in with an account that already has administrator rights.
- Open Start > Settings > Accounts > Other users.
- Under Other users, select the account’s flyout button.
- Select Change account type.
- In the dialog, choose Administrator from the dropdown.
- Select OK.
There is no separate Apply button in the current dialog; the change is saved when you select OK. The user may need to sign out and back in before all changes are reflected in the session.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
#1 Best Overall
- Reliable Plug and Play: The USB receiver provides a reliable wireless connection up to 33 ft (1), so you can forget about drop-outs and delays and you can take it wherever you use your computer
- Type in Comfort: The design of this keyboard creates a comfortable typing experience thanks to the low-profile, quiet keys and standard layout with full-size F-keys, number pad, and arrow keys
- Durable and Resilient: This full-size wireless keyboard features a spill-resistant design (2), durable keys and sturdy tilt legs with adjustable height
- Long Battery Life: MK270 combo features a 36-month keyboard and 12-month mouse battery life (3), along with on/off switches allowing you to go months without the hassle of changing batteries
- Easy to Use: This wireless keyboard and mouse combo features 8 multimedia hotkeys for instant access to the Internet, email, play/pause, and volume so you can easily check out your favorite sites
Change an administrator back to a standard user
Follow the same path: Settings > Accounts > Other users, open the user’s flyout, select Change account type, choose Standard User, and select OK. Keep at least one working administrator account on the PC so you can approve later system changes.
Add a user before changing its type
If the person does not yet have a Windows profile, add the account first:
- Open Settings > Accounts > Other users.
- Select Add account.
- Enter the person’s Microsoft account address and complete the prompts.
- For a local account, select I don’t have this person’s sign-in information.
- Select Add a user without a Microsoft account, then create the username and password.
- After the account appears under Other users, open its flyout and select Change account type.
- Choose Administrator or Standard User, then select OK.
Whether an account is local, Microsoft-based, or connected to work or school is an identity choice, separate from whether it is a standard user or administrator. To convert between a local and Microsoft account, use Settings > Accounts > Your info.
Check the current account type from Terminal
Open Terminal or Command Prompt and run:
whoami
whoami /groups
whoami /priv
whoami /all
whoami shows the current domain and username. whoami /groups lists groups in the current security token, whoami /priv lists privileges, and whoami /all displays the user name, security identifiers, groups, and privileges.
Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Repair Windows errors before they cause bigger problemsFix Now →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Look for membership in the local Administrators group when checking an administrator account. A Microsoft, work, or school account is not necessarily an administrator.
Modify a local account with Command Prompt
The net user command displays and modifies local or domain user accounts. Run Command Prompt as administrator when the operation requires elevated rights.
net user
net user username
net user username /active:no
net user username /passwordchg:no
net user username /passwordreq:yes
The first command lists local users. The second displays the selected account’s properties. The other examples disable the account, prevent the user from changing the password, or require a password.
Recommended Free Tools
Rank #2
- Dependable wireless connection: Enjoy the reliability and convenience of 2.4 GHz connectivity with your logitech wireless keyboard and mouse combo, wireless range up to 10 meters away at home, or work.
- Full-Size Wireless Keyboard: Comfortable, quiet typing on a familiar keyboard layout with palm rest, spill-resistant design, and media keys. This wireless keyboard and mouse logitech has easy-access to media keys
- Plug and Play: MK345 works seamlessly with Windows, macOS, and ChromeOS. Experience hassle-free setup with the logitech mk345 wireless combo and wireless keyboard mouse combo for various operating systems.
- Long-lasting Battery: The MK345 combo offers a full size keyboard battery life of up to 3 years and a mouse battery life of 18 months (1); batteries included
- Comfortable Right-handed Mouse: This wireless USB mouse with dongle works well for this wireless mouse and keyboard combo, featuring a contoured shape for all-day comfort and smooth, precise tracking and scrolling for easier navigation.
To add, change, or delete a local account, use the documented command forms:
net user username * /add
net user username /delete
net user username [options]
The asterisk makes Windows prompt for a password rather than putting it in the command line. Be careful with /delete: it removes the local Windows account and its sign-in information from the device.
By default, net user targets the local computer. Adding /domain targets the domain controller in the computer’s primary domain. Do not use it unless you intend to modify a domain account and have the required permissions.
Grant access to a file or folder with icacls
Account type and file access are separate. Windows protects NTFS files and folders with discretionary access control lists (DACLs). Use icacls to inspect or modify them; it replaces the deprecated cacls command.
View existing permissions
In an elevated Command Prompt, run:
icacls “C:\Projects\Report.docx”
icacls “C:\Projects”
The output shows accounts and groups with entries on the file or folder. Use a full path and quotation marks when the path contains spaces.
Grant read or modify access
icacls “C:\Projects\Report.docx” /grant UserName:(R)
icacls “C:\Projects” /grant UserName:(OI)(CI)M /T
Rank #3
- Connect in seconds: Fast, easy Bluetooth wireless technology—pair and play this Logitech Wireless Keyboard and Mouse Combo without the need for a dongle or USB port
- Durable and reliable: Built for quality, MK250 Bluetooth keyboard offers long-lasting keys, a spill-resistant design (2), and a 12-month keyboard battery life (1)
- Comfort is key: Deep-profile keys and an adjustable tilt-leg design make typing feel great
- Space-saving: with a compact layout that still includes number pad, arrow keys, and handy F-key shortcuts
- Made responsibly: Designed to last, MK250 plastic parts are durably made with a minimum of 66% (mouse) and 64% (keyboard) recycled plastic (3)(4)
R grants read access, M grants modify access, and F grants full control. On a directory, (OI) passes permission to files and (CI) passes it to subfolders. The /T switch processes existing contents recursively.
Without :r, /grant adds the specified permission to existing explicit grants. To replace the user’s existing explicit grant, use:
icacls “C:\Projects” /grant:r UserName:(M)
Deny or remove permissions
An explicit deny takes precedence over an explicit grant for the same right, so use denial sparingly:
icacls “C:\Projects\Report.docx” /deny UserName:(W)
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Repair Windows errors before they cause bigger problems3Scan for outdated or missing drivers - takes under a minuteicacls “C:\Projects\Report.docx” /remove:g UserName
icacls “C:\Projects\Report.docx” /remove:d UserName
/deny adds an explicit deny entry and removes the same permissions from explicit grants. /remove:g removes granted entries for the user, and /remove:d removes denied entries. Deny rules can cause confusing results when a user belongs to several groups, so removing an unnecessary deny is often safer than adding more grants.
Reset inherited permissions
To restore a file or folder to default inherited ACLs:
icacls “C:\Projects\Report.docx” /reset
icacls “C:\Projects” /reset /T /C
Rank #4
- 【Ergonomic Wireless Keyboard Mouse 】: Wireless ergonomic keyboard is equipped with adjustable height tilt legs to increase comfort and prevent your wrists injury when typing for a long time. The full size wireless keyboard with numeric keypad and 12 multimedia shortcut keys, such as play/ pause, volume increase and decrease, and email, to help you improve work efficiency
- 【Stable & Reliable Wireless Connection】: This wireless keyboard and mouse combo share the same USB receiver(stored in the mouse), and they can also be used separately. Plug & play, no need to download any software, 2.4 GHz wireless provides a powerful and reliable connection up to 33 feet(10m) without any delays.You can enjoy the convenience and freedom of wireless connection at home or at work
- 【Comfortable Optical Mouse】: This compact lightweight wireless mouse features a hand-friendly contoured shape for all-day comfort, and smooth, precise tracking.1600 DPI to meet your daily needs. Perfect for home & office work and entertainment
- 【Long Battery Life】: Up to 365 Days of battery life for keyboard and mouse wireless, say goodbye to the hassle of charging cables and replacing batteries. After 10 minutes of inactivity, the wireless keyboard mouse combo will automatically go into sleep mode to save energy. The wireless keyboard requires one AAA battery, and the wireless mouse requires one AA battery.
- 【Less Noise, More Quiet Keys】: Soft membrane keys provide a quiet and comfortable typing experience, So you can type with confidence on a wireless keyboard crafted for comfort, precision and fluidity. The wireless mouse adopts silent micro-motion technology, which is almost completely silent when clicked. No more concerns about disturbing others.
/T applies the reset to the directory and its contents. /C tells icacls to continue when it encounters an error. Test this on a small path first; resetting a large directory can remove carefully configured custom permissions.
You can identify an account by name or SID. Prefix a numeric SID with an asterisk:
icacls “C:\Projects\Report.docx” /grant *S-1-1-0:(R)
Control app permissions in Windows 11
Open Start > Settings > Privacy & security, select a category such as Location, Microphone, Webcam, File system, Account info, Bluetooth, Notifications, Pictures library, or Video library, and choose which apps may use it.
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchPC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11File system permission lets an app read or write files and folders the signed-in user can access. It does not make the app an administrator or override NTFS permissions.
Windows Desktop apps are an important limitation. Microsoft says they may have broad access to system resources and are not listed in the same way as Store apps; most of their capabilities cannot be controlled from the Privacy settings page. App elevation is also separate from ordinary app permissions.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Adjust UAC prompts without changing account permissions
User Account Control controls elevation prompts. It does not turn a standard user into an administrator or remove an account from the Administrators group.
- Open Control Panel.
- Select System and Security.
- Select Change User Account Control settings.
- Move the slider to the required notification level.
- Select OK.
The available levels are:
- Always notify
- Notify me only when apps try to make changes to my computer (the default)
- Notify me only when programs try to make changes to my computer (do not dim my desktop)
- Never notify (disables UAC)
Do not use Never notify as a substitute for changing account permissions. Microsoft marks it as not recommended because it weakens protection against unauthorized changes.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Best Value
- 【Lag-free & Efficient】Stable and reliable connection of wireless keyboard and mouse is up to 10m(33ft). This combo share a nano USB receiver, no need to take up additional USB ports (Also the wireless keyboard and mouse can also be used separately). Plug and play, no software needed,convenient and efficient.
- 【Quiet & Type in Comfort】Wireless keyboard come with adjustable height tilt legs to increase comfort and prevent your wrists injury when typing for a long time.Our wireless keyboard adopts a silent structure. Soft membrane keys provide a quiet and comfortable typing experience.The wireless mouse is quiet without any clicking sound also.So whether at home or in the office, you can use this combo as you please without worrying about disturbing others.
- 【Full Size Keyboard】This keyboard saves desktop space while retaining its full size.The full size wireless keyboard with numeric keypad and 12 multimedia shortcut keys, such as play/ pause, volume increase and decrease, and search, to help you improve work efficiency.
- 【Auto Power Saving Function】Wireless keyboard and mouse have a smart auto-sleep mode to save power for long battery life. They will enter sleep mode after stop using a while(Refer to the instructions for details). Unplug the receiver or after the PC shutdown, they will enter sleep mode too.You can press any keys to wake. (battery life may vary based on user and computing conditions)
- 【Comfortable Optical Mouse】This silent wireless mice provides 3 adjustable DPI (800/1200/1600) to meet your different needs in terms of sensitivity.The compact lightweight design of wireless mouse and a hand-friendly contoured shape for all-day comfort, and smooth, precise tracking. Very suitable for office and daily use.
Why an administrator may still be blocked
Changing account type is not a universal access bypass. File access can still depend on the file’s DACL, ownership, inheritance, explicit deny entries, encryption, and other security controls. If the problem concerns one folder, inspect its ACL with icacls rather than changing the person’s entire account to administrator.
On a work- or school-managed PC, the organization may control account types, local groups, app permissions, and policies. Domain accounts have additional account types and may require a network administrator to make changes. If the dropdown is unavailable, the account is missing, or the setting reverts, contact the organization’s administrator.
Remove a Windows account
To remove a local Windows profile from the PC, open Settings > Accounts > Other users, open the account’s flyout, and select Remove next to Account and data. This removes that account’s sign-in information and device data, but does not delete the person’s Microsoft account.
Back up anything in the user’s profile first. Removing the wrong account can delete locally stored desktop files, documents, downloads, and other profile data.
FAQ
How do I change a user to administrator in Windows 11?
Open Settings > Accounts > Other users, open the user’s flyout, select Change account type, choose Administrator, and select OK. You must use an account allowed to make the change.
Does changing a Microsoft account to administrator make it a local account?
No. Account identity and account type are separate. A Microsoft account can be a Standard user or Administrator, as can a local account. Convert between account identities from Settings > Accounts > Your info.
Does turning off UAC give a standard user administrator rights?
No. UAC controls elevation notifications. It does not add the user to the Administrators group or change the account type.
How do I give a user access to one folder without making them an administrator?
Keep the account as a Standard user and add an NTFS permission for the folder. For example, icacls “C:\Projects” /grant UserName:(OI)(CI)M /T grants modify access to the folder, its files, and subfolders.
Why can’t I change the account type on a work computer?
The device may be joined to a domain or managed by an organization. Administrative controls or policies can restrict account types and local permission changes. Contact the organization’s IT administrator.
What is the difference between app permissions and file permissions?
App permissions control capabilities such as microphone, camera, location, or file-system access for supported apps. NTFS permissions control access to particular files and folders. Neither automatically changes the user’s administrator status.
The Bottom Line
Use Settings > Accounts > Other users > Change account type to change a person’s Standard user or Administrator status. Use icacls for a specific file or folder, Privacy & security for supported app capabilities, and UAC settings only to control elevation prompts. Keeping these controls separate helps provide needed access without granting unnecessary system-wide privileges.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Repair Windows errors before they cause bigger problems3Fix the driver behind crashes, sound loss and screen glitches
