Windows User & Group Lab
Create local user accounts, manage group membership, and verify access by signing in as a delegated user on Windows 11.
Lab Objectives
- Review existing local users and groups to establish a baseline.
- Create three standard user accounts with unique strong passwords.
- Create a custom local group, add all three users, and confirm membership.
- Sign out and log in as one of the new accounts to validate the configuration.
Part 1: Baseline Inventory
- Press Windows, type Computer Management, and choose Run as administrator.
- Expand System Tools > Local Users and Groups. Review the existing Users and Groups lists, noting any existing accounts for your records.
Part 2: Create Three Local Users
- In Computer Management, right-click Users and choose New User….
- Create LabUser1, LabUser2, and LabUser3 with strong passwords. Clear “User must change password at next logon” for the lab and leave other options unchecked.
- After each user is created, double-click the account to confirm it belongs only to the default Users group.
Part 3: Create and Populate a Group
- Right-click the Groups folder and select New Group…. Name it LabSupport and click Add….
- Enter LabUser1; LabUser2; LabUser3, choose Check Names to validate, then click OK and Create.
- Open the group’s properties to confirm all three users appear. Capture a screenshot for your lab documentation.
Part 4: Sign In as a Lab User
- Sign out of your administrator session or switch users via Ctrl + Alt + Delete > Sign out.
- At the sign-in screen, choose LabUser2 (or any of the new accounts) and authenticate with the password you set.
- Open Settings > Accounts > Your info to confirm you are signed in with the expected lab account. Optional: open Task Manager > Users to see the active session.
- On the administrator profile, reopen Computer Management, open LabSupport, and verify the user remains in the members list.
- Document the user experience: note the creation of the new profile, any first-run prompts, and proof of group membership in your lab worksheet.
Optional Cleanup
- Remove each lab user by right-clicking the account in Computer Management and selecting Delete.
- Delete the LabSupport group by right-clicking it under Groups and choosing Delete.
- Clear local profiles from System Properties > Advanced > User Profiles if reclaiming space.
Quick Reference
- MMC snap-in:
lusrmgr.msc(Local Users and Groups) - Settings route: Settings > Accounts > Other users
- Check membership: User Properties > Member Of tab
Automation tip: use Group Policy Preferences or imaging tools to pre-stage accounts and group membership.
Completion Checklist
- Three local users created with strong passwords.
- LabSupport group exists and contains all three users.
- Login verified under one of the lab accounts with group membership confirmed.
- Evidence captured (screenshots of Computer Management or Settings) for each task.