How to Create a Guest Account on Windows 11 (Securely share your PC with others)

Sharing your Windows 11 PC with family, friends, or colleagues can be risky if you don't limit what they can access. A dedicated guest account is the safest way to let others use your computer without exposing your personal files or settings. Although Windows 11 removed the traditional "Guest" account, you can still set up a restricted user for guests. This guide covers everything you need to create, configure, and secure a guest account on your Windows 11 PC.

Why Use a Guest Account?

Letting someone use your main Windows account exposes your browsing history, documents, saved passwords, and even emails. Even a well-meaning guest might accidentally change your settings or delete files. A guest account creates a separate environment with limited access where visitors can only use basic apps and browse the internet. They won’t see your private folders or be able to install software that could harm your PC.

Setting up a guest account is about more than privacy. It helps protect your system from accidental or intentional changes, malware installs, or unwanted software. With a properly configured guest account, visitors get what they need while you keep control over your data and computer’s health.

Understanding the Guest Account Limitations in Windows 11

Windows used to include a built-in Guest account, but that option disappeared after Windows 10. In Windows 11, there’s no official, one-click Guest account feature. Instead, you can create a standard local user and restrict it as much as possible. If you try to name a new account "Guest," Windows will block it, so you’ll need a different name like "Visitor" or "TempUser."

This method isn’t quite as restrictive as the old Guest account, but with the right settings, you can prevent a guest from installing programs, changing system configurations, or viewing your files. You have to do a bit of manual tweaking, but it’s the best secure option available in current Windows versions.

Step-by-Step: Create a Restricted Guest Account

To create a safe guest account, start by setting up a local user with limited rights. Here’s how:

1. Press Windows + I to open Settings.
2. Go to Accounts > Other users.
3. Click Add account under "Add other user".
4. Choose I don't have this person's sign-in information.
5. Click Add a user without a Microsoft account.
6. Enter a username, like "Visitor" (avoid "Guest"), and leave the password fields blank if you want, or set an easy password for your guest.

Once created, the account will appear under "Other users." By default, this is a standard (non-admin) account, suitable for guests. They won’t be able to install programs or view files in your user folder.

Harden the Guest Account’s Restrictions

The default standard user is already locked down, but you can take extra steps to make it safer for guests. First, remove the ability to change the password. Open Computer Management (Win + X, then select Computer Management), go to Local Users and Groups > Users, and double-click your guest account. Check "User cannot change password" and "Password never expires." Save changes.

For stricter control, use the Local Group Policy Editor (gpedit.msc, available on Pro editions). Navigate to User Configuration > Administrative Templates > Control Panel and disable access to Control Panel and PC settings. You can also restrict access to Command Prompt and Registry Editor the same way. These tweaks prevent guests from tampering with important system areas.

Block Guest Access to Your Files and Apps

By default, each user has their own set of folders and settings. However, some folders on your PC, like C:\Users\Public, are shared by all users. Move any sensitive files out of Public folders and your main user’s Desktop, Documents, Pictures, and Downloads if you’re concerned about privacy.

If you want to hide particular apps from the guest, you can uninstall or restrict them using Family Safety features or third-party software. For even more privacy, consider using BitLocker or another encryption tool to lock down your personal folders. Remember to sign out of your own account before handing the PC to a guest to prevent them from accessing your open apps or browser tabs.

Disable Microsoft Account Features for Guests

It’s possible for a guest to sign into their own Microsoft account on a standard user account, but you can block this. For maximum privacy, create the guest account as a local user only, and avoid setting up a Microsoft account during creation. In Settings, go to Accounts > Email & accounts and make sure no email addresses are added to the guest profile.

If you want to stop guests from downloading apps from the Microsoft Store, use the Group Policy Editor or registry tweaks to disable Store access for the guest account. This reduces the risk of unwanted software or games being installed.

How to Remove or Disable the Guest Account Later

After your guests are done, you may want to delete or disable their account. Go back to Settings > Accounts > Other users, select the guest account, and click Remove. This will delete the account and its files. If you just want to temporarily disable the account, use Computer Management, right-click the user, and choose Properties. Check "Account is disabled," then apply the change.

For shared family PCs, consider disabling rather than deleting the account, so you can reactivate it easily whenever guests visit again. Always sign back in to your own account first before making any changes to user accounts.

Frequently asked questions