Local user accounts keep sign-in credentials on a single Windows PC, which fits shared workstations, kiosks, and offline systems where a Microsoft account adds unnecessary dependencies. Separate local profiles reduce accidental data mixing and provide cleaner access control for files and apps.
Local accounts are stored in the machine’s local security database and receive a profile under C:\Users when first used to sign in. Account type (standard or administrator) controls what system-wide changes are allowed, while elevation prompts can still use an existing administrator password for one-off administrative tasks.
Creating or promoting accounts requires an administrator session, and granting administrator rights increases the blast radius of malware, mistakes, and weak passwords. Some Windows 11 setups heavily encourage a Microsoft account during initial device setup, but additional local accounts can still be created later from Settings. Keep at least one known administrator account available before signing out of the last admin profile.
On Windows 10, use Settings → Accounts → Family & other users.
Assigning Administrator privileges allows system-wide changes and should be limited to accounts that require it.