1.6 Given a scenario, configure Microsoft Windows settings
📘CompTIA A+ Core 2 (220-1202)
1. Types of Windows Accounts
Windows has several account types. Each type has different permissions:
a. Local Accounts
- Definition: Accounts stored on the computer itself. No internet connection needed.
- Access: Only works on that computer.
- Uses: Often for shared computers in labs or offices.
- Permissions:
- Administrator: Can install software, change system settings, and manage other accounts.
- Standard User: Can run programs and use the system but cannot make major system changes.
Example for IT environment: A local account might be used for a shared office PC that doesn’t connect to Microsoft 365.
b. Microsoft Accounts
- Definition: Online accounts connected to Microsoft services (Outlook, OneDrive, Windows Store).
- Access: Can log in to any Windows device with the same Microsoft account.
- Advantages:
- Syncs settings, files, and themes across devices.
- Can recover password online.
- Permissions: Same as local accounts (Admin or Standard), but linked to cloud features.
Exam tip: Microsoft accounts can be used to download apps from Microsoft Store and enable cloud backups.
c. Active Directory / Domain Accounts
- Definition: Used in enterprise environments with Windows Server.
- Access: Managed centrally by IT administrators through a domain controller.
- Permissions: Set by IT policies (Group Policy). Can log in on any computer joined to the domain.
Exam relevance: Know the difference between local accounts (specific computer) and domain accounts (network-wide access).
d. Work or School Accounts
- These are accounts connected to Microsoft 365 or Azure Active Directory.
- Typically used for corporate or educational environments.
- Allow access to company resources, email, cloud storage, and apps.
2. Account Management in Windows
Windows provides tools to create, modify, and manage accounts:
a. Settings App
- Path:
Start > Settings > Accounts - Functions:
- Add or remove accounts (local or Microsoft)
- Change account type (Standard ↔ Administrator)
- Manage sign-in options (password, PIN, biometric)
- Enable Family & other users for shared computers
- Exam tip: This is the primary way for modern account management.
b. Control Panel
- Path:
Control Panel > User Accounts - Older method for managing accounts.
- Useful for renaming accounts, changing types, or removing accounts.
c. Computer Management
- Path:
Right-click Start > Computer Management > Local Users and Groups - Advanced tool for:
- Creating or deleting local accounts
- Setting password policies
- Assigning group membership
- Exam tip: Typically used in IT environments, not everyday users.
3. Account Permissions and Groups
Windows uses groups to simplify permissions:
| Group | Permissions |
|---|---|
| Administrators | Full control over PC: install software, manage users, change system settings |
| Standard Users | Can run programs, customize personal settings, but cannot modify system-wide settings |
| Guests | Very limited access, temporary use, cannot install apps |
| Power Users | Legacy group: can install some software, but less than Admin |
Tip for exam: Know Administrator vs Standard User distinction—most questions test this.
4. Account Security Settings
For the exam, know how to secure accounts:
a. Password Policies
- Set complexity: uppercase, lowercase, numbers, symbols
- Set minimum/maximum length
- Expiration and history policies (for domains)
- Tool: Local Security Policy or Group Policy in enterprise settings
b. Sign-in Options
Windows supports multiple ways to log in:
- Password: Standard, basic authentication
- PIN: Short numeric code, tied to device
- Biometric: Windows Hello (fingerprint, face recognition)
- Picture password: Draw a shape over a picture
- Exam relevance: Recognize Windows Hello and PIN as modern authentication methods.
c. Account Lockout Policies
- Locks account after multiple failed login attempts
- Prevents brute-force attacks
- Common in enterprise setups
5. Special Accounts and Features
- Built-in Administrator account: Exists on all Windows installations; typically disabled by default.
- Guest account: Limited access; disabled by default.
- Family & Child Accounts: Allow parents to monitor activity and set restrictions.
6. Exam Tips for Accounts
- Always identify account type first: Local, Microsoft, Domain, Work/School.
- Remember default permissions: Admin vs Standard User.
- Know modern login options: Password, PIN, biometric.
- Understand security policies: Password complexity, lockout, account expiration.
- Be familiar with management tools:
- Settings → Accounts (modern)
- Control Panel → User Accounts (classic)
- Computer Management → Local Users and Groups (advanced)
✅ Summary in Simple Terms:
- Windows accounts control who can log in and what they can do.
- Local accounts are on the computer; Microsoft accounts are online and sync settings.
- Domain/Work accounts are for enterprise networks.
- Admins have full control; Standard users have limited control.
- Secure accounts using password policies, PINs, and biometric login.
- Use Settings, Control Panel, or Computer Management to manage accounts.
