I'm trying to set up a newly installed laptop. The standard is having the Administrator account enabled and current user demoted to standard account. I've been doing this manually for a while (using lusrmgr.msc to enable Administrator and using Control Panel > User Accounts on Administrator account to demote the user), and want to create a batch file.
In this laptop, I've done this:
net user Administrator /active:yes
net user Administrator abc123
net localgroup Administrators %USERNAME% delete
I checked the result via Control Panel > User Accounts and found out that the info on the Tom user is
TOM
Local Account
Guest Account
Password Protected
This is different from my previous manual settings, which only left Local Account and not Guest Account.
My question is: Why this happens? What's different with setting up manually via Control Panel vs cmd?
Related: How this Guest Account status affect a user? How can I remove this Guest Account status?
Currently I only encountered this problem:
- The standard user cannot open Manage Other Accounts on Control Panels > User Accounts. There is no accounts displayed, including the recently enabled Administrator account.
- The standard user does not show on Manage Other Accounts when logged in as Administrator. It only shows Administrator account. It does show a newly created account.
I suspected because it's flagged as guest account, so it cannot manage other user account and does not show in Manage Other Accounts.
As of v 1903, the first method was/is no longer possible because “Manage Accounts” does not show the account “Guest”.
I added a new standard user later through the Administrator account and it doesn't have the guest account status and is not restricted to see the Administrator account.
