How to set up a guest user account for family members

A shared Windows computer can be useful for visitors without exposing the owner's email, documents and administrator controls. Many Australian households share one laptop among adults working from home, children completing homework and relatives staying for short visits.

Setting up a guest user account gives temporary visitors a separate sign-in with limited access. It is also worth knowing when a standard account or Microsoft family account offers better protection and more features.

Before changing anything, decide how long the person needs access and whether their work must be saved. These choices determine whether to use the built-in guest profile, a local account with its own password, or a child account with online controls.

Choose the right type of access

The built-in Guest account is intended for short sessions. A visitor can open installed programs and browse the web without receiving a full personal profile or learning the administrator password. Guest access normally has no password, so it is unsuitable for private records.

A local standard account suits a regular family member who needs a password, separate downloads and files that remain after sign-out. It also prevents that person from installing software or changing protected settings without administrator approval.

A Microsoft child account is the better choice when you need screen-time limits, game permissions or purchase controls online. Choose based on the person's stay and privacy needs rather than applying one setup to everyone.

Check your Windows edition and prepare

Windows 10 and Windows 11 support local accounts, and creating one does not require a Microsoft subscription. Open Settings, select System, then About to check your edition and installed update. Older installations may need updating before account changes are made.

Sign in to the administrator profile and make sure you know its sign-in details. Back up important documents first, especially if the computer contains family records or business files.

A local account can be created without internet access, so NBN availability is not a barrier. Online family controls, Microsoft account registration and security updates do need a working internet connection.

Enable the built-in guest account

On Windows versions that include it, open Control Panel from the Start menu. Select User Accounts, then User Accounts again, choose Guest and select Turn on guest account. Confirm the administrator prompt using your own administrator credentials.

If Guest is missing, open Terminal or Command Prompt with administrator rights and run net user guest /active:yes. If your Windows release or device policy has removed the built-in feature, the command will report that the account is unavailable; use a standard account instead.

After enabling it, sign out from the power menu and select Guest at the sign-in screen. Test the account before handing over the computer. Keep the main administrator profile out of sight, since a guest login should never depend on sharing its password.

Create a standard account for regular use

For regular use, open Control Panel and choose User Accounts, then Add new account. Select Add someone without a Microsoft account, enter a display name and create a unique password. Keep the new account as a standard user rather than an administrator, and sign into it once so Windows creates its personal folders.

The new profile receives its own Desktop, Documents, Downloads and Pictures locations. This separation matters on a shared Melbourne or Sydney family laptop that moves between hybrid workers, students and evening callers without a full sign-out between uses.

Choose a password that others cannot guess, and avoid personal details that reveal it. A password manager can store the credentials securely, but the administrator password should not be saved inside the shared guest session or the new standard profile.

Keep files and sensitive information separate

A standard account keeps one person's documents out of another person's private profile. Use a clearly named shared folder for files that genuinely need to be exchanged, then move them into the owner's profile when appropriate. Guest files should be treated as temporary and not as a dependable archive.

Avoid opening myGov, Centrelink, My Health Records, online banking or the owner's email in the guest profile. Sign out of websites and close the browser after use. Separate Windows accounts reduce accidental exposure, but they do not replace sensible security habits for sensitive transactions.

Downloads and removable media are common infection routes on shared computers. Keep Windows Security enabled, scan USB drives and download applications from their official sites. Controlled Folder Access can add ransomware protection on supported editions, although it needs careful configuration.

Apply online family controls where needed

For a child who needs online boundaries, use a Microsoft child account linked to an adult's Microsoft family group. Visit family.microsoft.com, add the child and review app, gaming and spending permissions. The account can then be used in Windows with those restrictions applied.

Children commonly use the same family computer for schoolwork, games and video calls, often alongside an adult. Screen-time limits can make handovers predictable, while purchase approval helps avoid accidental spending on apps or downloadable content.

A separate profile supports access control, but it is not a complete privacy-compliance measure. For a paid home business, the Privacy Act 1988 and Australian Privacy Principles may apply to customer information, while state and territory laws can add duties for health records. Keep access limited to people with a genuine need to know.

Test the setup and maintain it

Press Windows key + L and choose Switch user to test without closing programs. Confirm that the correct profile appears, open a web page and try any required app or printer. Check that files save in the expected personal folder rather than on the shared Desktop.

If the Guest tile is absent, sign out completely and try again. If it remains missing, the built-in account may be unavailable on that Windows installation. Movian Security can check account settings, policies and permissions when local setup is blocked by device management.

Review profiles at the start of each school term and after a long-term visitor leaves. Remove unused accounts, keep Windows updated and maintain separate backups for family and business documents. The result is a shared computer that supports visitors without turning the owner's private files into a communal folder.