What is lusrmgr.msc? How to Manage Windows Users and Groups (2026)

By /

lusrmgr.msc is a Windows system file that opens the Local Users and Groups management console. This built-in tool lets you create, modify, and delete user accounts and groups on your computer without needing third-party software.

When you run lusrmgr.msc, you get direct access to manage who can use your computer and what permissions they have. It’s faster than navigating through Windows Settings and gives you more control over user management tasks.

Type lusrmgr.msc in the Run dialog (Windows key + R) and press Enter. The Local Users and Groups window opens immediately, showing you all accounts on your machine.

Table of Contents

Why You Need to Know About lusrmgr.msc

Managing users and groups becomes critical when multiple people use the same computer or when you need to control access to specific files and folders. Here’s what this tool solves:

User account problems like forgotten passwords, disabled accounts, or accounts that won’t delete through normal Settings menus get fixed quickly through lusrmgr.msc.

Permission issues where someone can’t access shared folders or resources often trace back to incorrect group memberships. This tool shows you exactly which groups each user belongs to.

Security concerns require you to audit who has administrative access or disable old accounts. The Local Users and Groups console displays everything in one place.

Which Windows Versions Include lusrmgr.msc

Not every Windows edition ships with this management tool. Here’s the breakdown:

Windows Editionlusrmgr.msc Available?
Windows 10 ProYes
Windows 10 HomeNo
Windows 11 ProYes
Windows 11 HomeNo
Windows EnterpriseYes
Windows Server (all)Yes

Home editions lack lusrmgr.msc entirely. Microsoft removed it to simplify the interface for casual users. If you run Windows Home, you’ll need to use Settings app or Command Prompt alternatives.

How to Open lusrmgr.msc

Method 1: Run Dialog (Fastest)

  1. Press Windows key + R simultaneously
  2. Type lusrmgr.msc in the box
  3. Click OK or press Enter
  4. The console opens in 2 seconds

Method 2: Command Prompt

  1. Press Windows key + X
  2. Select “Command Prompt (Admin)” or “Terminal (Admin)”
  3. Type lusrmgr.msc and press Enter
  4. The tool launches with administrator privileges

Method 3: Search Bar

  1. Click the search icon in your taskbar
  2. Type lusrmgr.msc
  3. Click the result that appears
  4. Windows opens the management console

Method 4: Computer Management

  1. Right-click on “This PC” or “My Computer”
  2. Choose “Manage”
  3. Expand “Local Users and Groups” in the left panel
  4. Access the same functionality within a larger management interface

Pro tip: Create a desktop shortcut by right-clicking your desktop, selecting New > Shortcut, and entering lusrmgr.msc as the location. Double-click it anytime you need quick access.

Understanding the lusrmgr.msc Interface

The console splits into two main sections in the left panel:

Users folder contains every account on your computer, including:

  • Active user accounts you created
  • Built-in accounts like Administrator and Guest
  • Hidden system accounts Windows uses internally
See also  Best Practices for Consistent Personal Branding: Building Authority in 2026

Groups folder holds collections of users with similar permissions:

  • Administrators (full system control)
  • Users (standard permissions)
  • Power Users (elevated but not full admin rights)
  • Backup Operators, Remote Desktop Users, and specialized groups

Right-click any user or group to see available actions. Double-click to open properties and view detailed settings.

Managing User Accounts with lusrmgr.msc

Creating a New User Account

  1. Right-click the “Users” folder
  2. Select “New User”
  3. Fill in the required fields:
    • User name: The login name (no spaces recommended)
    • Full name: Optional descriptive name
    • Description: Optional note about this account
    • Password: Set a strong password
    • Confirm password: Type it again exactly
  4. Choose checkbox options:
    • “User must change password at next logon” (recommended for new employees)
    • “User cannot change password” (for shared accounts)
    • “Password never expires” (for service accounts only)
    • “Account is disabled” (to create but not activate yet)
  5. Click “Create” then “Close”

The new account appears in the Users list immediately.

Resetting a User Password

Forgotten passwords happen constantly. Here’s the fix:

  1. Double-click the user account in the Users folder
  2. Click “Set Password” button
  3. Read the warning (password reset clears some encrypted data)
  4. Click “Proceed”
  5. Enter the new password twice
  6. Click OK

The user can now log in with the new password. They’ll lose access to encrypted files and stored credentials unless they know the old password.

Disabling vs Deleting User Accounts

Disabling keeps the account but prevents login:

  1. Right-click the user account
  2. Select “Properties”
  3. Check “Account is disabled”
  4. Click OK

This preserves all files and settings. Enable it later by unchecking the same box.

Deleting removes the account permanently:

  1. Right-click the user account
  2. Select “Delete”
  3. Confirm the warning
  4. The account disappears forever

Deleted accounts cannot be recovered. Their files remain in C:\Users[username] until you manually delete that folder.

Setting Account Expiration Dates

Temporary employees or contractors need accounts that automatically disable:

  1. Double-click the user account
  2. Click the “Account” tab
  3. Under “Account expires,” select “End of”
  4. Choose the date from the calendar
  5. Click OK

Windows disables the account at midnight on that date. The person cannot log in afterward.

Working with Groups in lusrmgr.msc

Understanding Group Purpose

Groups simplify permission management. Instead of setting permissions for 20 individual users, add them to a group and set permissions once.

Common groups explained:

  • Administrators: Complete control over the computer, install software, change system settings
  • Users: Run applications, save files, but can’t install software or change system settings
  • Remote Desktop Users: Can connect to this computer from another location
  • Backup Operators: Can backup and restore files regardless of permissions
  • Power Users: Legacy group with limited use in modern Windows

Adding Users to Groups

  1. Double-click any group in the Groups folder
  2. Click “Add” button
  3. Type the username in the box (or click “Advanced” then “Find Now” to see all users)
  4. Click “Check Names” to verify
  5. Click OK twice

The user now has all permissions assigned to that group.

Removing Users from Groups

  1. Double-click the group
  2. Select the user in the members list
  3. Click “Remove” button
  4. Click OK

They lose the group’s permissions immediately. If they’re logged in, changes take effect after they log out and back in.

Creating Custom Groups

  1. Right-click the “Groups” folder
  2. Select “New Group”
  3. Enter a group name (like “Marketing Team” or “Project Alpha”)
  4. Add a description explaining the group’s purpose
  5. Click “Add” to include members now (or skip this)
  6. Click “Create”

Custom groups appear in permission dialogs alongside built-in groups. Use them to manage department access or project teams.

Advanced User Account Properties

Member Of Tab

Shows which groups include this user. Add or remove group memberships here without opening each group separately.

Click “Add” to join more groups. Select a group and click “Remove” to leave it. Most users should belong to just “Users” group unless they need elevated permissions.

Profile Tab

Controls where Windows stores user settings:

Profile path: Network location for roaming profiles (enterprise environments only)

Logon script: Runs automatically when the user logs in (typically .bat or .vbs files)

Home folder: Assigns a network drive or local folder as the user’s document storage

See also  Top 10 Best Money Tracker Apps in 2026

Most home users leave these blank. Business networks use them to centralize user data and settings.

Environment Tab

Appears in some Windows versions for setting user-specific environment variables. These override system variables when that user logs in.

Troubleshooting Common lusrmgr.msc Problems

“lusrmgr.msc not found” Error

Cause: You’re running Windows Home edition, which excludes this tool.

Solution: Use these alternatives instead:

  • Open Settings > Accounts > Family & other users
  • Use Command Prompt: net user command lists accounts
  • Use PowerShell: Get-LocalUser shows all users
  • Install third-party user management software

There’s no way to add lusrmgr.msc to Home editions through official Microsoft methods.

“Access Denied” When Opening lusrmgr.msc

Cause: Your account lacks administrator privileges.

Solution:

  1. Right-click the Start button
  2. Select “Run” (or press Windows key + R)
  3. Type lusrmgr.msc
  4. Press Ctrl + Shift + Enter (runs as administrator)
  5. Click “Yes” when User Account Control asks for permission

If that fails, log in with an administrator account first.

Cannot Delete Administrator Account

Cause: Windows prevents deletion of the built-in Administrator account for safety.

Solution: Disable it instead:

  1. Right-click the Administrator user
  2. Select “Properties”
  3. Check “Account is disabled”
  4. Click OK

The account stays in the system but nobody can use it to log in.

Changes Don’t Take Effect

Cause: Windows caches user information until next login.

Solution: The user must:

  1. Save all work
  2. Click Start > Power > Sign out
  3. Log back in
  4. Changes apply immediately

Group membership changes always require a fresh login to activate.

lusrmgr.msc Opens Then Closes Immediately

Cause: Corrupted system files or permission conflicts.

Solution:

  1. Press Windows key + X
  2. Select “Terminal (Admin)” or “Command Prompt (Admin)”
  3. Type sfc /scannow and press Enter
  4. Wait 15-30 minutes for system file repair
  5. Restart your computer
  6. Try opening lusrmgr.msc again

If problems persist, check Windows Event Viewer for specific error messages under Windows Logs > Application.

Command Line Alternatives to lusrmgr.msc

Net User Command

Manages users from Command Prompt:

List all users:

net user

Create new user:

net user username password /add

Delete user:

net user username /delete

Change password:

net user username newpassword

Disable account:

net user username /active:no

Net Localgroup Command

Manages groups from Command Prompt:

List all groups:

net localgroup

See group members:

net localgroup groupname

Add user to group:

net localgroup groupname username /add

Remove user from group:

net localgroup groupname username /delete

These commands work in all Windows editions, including Home versions. You need administrator privileges to run them.

Security Best Practices for User Management

Principle of Least Privilege

Give users the minimum permissions needed for their tasks. Don’t add everyone to Administrators group just because it’s easier.

Standard practice:

  • Regular users: “Users” group only
  • IT support staff: “Power Users” or custom groups with specific permissions
  • System administrators: “Administrators” group

Create separate admin accounts for administrative tasks. Use standard accounts for daily work, even if you’re the administrator.

Strong Password Requirements

Windows doesn’t enforce password complexity by default in lusrmgr.msc. You must manually require:

  • Minimum 12 characters
  • Mix of uppercase, lowercase, numbers, and symbols
  • No dictionary words or personal information
  • Different from previous passwords

Enable “User must change password at next logon” for new accounts. This forces users to set their own password immediately.

Regular Account Audits

Check your Users and Groups monthly:

  1. Look for accounts you don’t recognize
  2. Disable accounts for departed employees immediately
  3. Remove users from groups they no longer need
  4. Delete guest accounts and temporary accounts

Unused accounts create security vulnerabilities. Attackers target old, forgotten accounts with weak passwords.

Disable Guest Account

The Guest account lets anyone use your computer without a password:

  1. Open lusrmgr.msc
  2. Double-click “Guest” in Users folder
  3. Check “Account is disabled”
  4. Click OK

Keep it disabled unless you specifically need temporary access for visitors.

When to Use lusrmgr.msc vs Windows Settings

Use lusrmgr.msc when you need:

  • Quick access to all user accounts in one window
  • Advanced options like account expiration dates
  • Detailed group membership management
  • Batch operations on multiple users
  • Access to hidden system accounts

Use Windows Settings when you need:

  • Simple account creation for family members
  • Basic password changes
  • Microsoft account management
  • Parental controls
  • Easier interface for non-technical users
See also  How to Innovate in Tech: The Complete Guide for Success in 2026

Power users prefer lusrmgr.msc for speed and control. Casual users find Settings more approachable. Both tools modify the same underlying accounts.

According to Microsoft’s official documentation, lusrmgr.msc provides administrative control over local security accounts, making it essential for system administrators managing Windows environments.

lusrmgr.msc on Windows Server

Windows Server relies heavily on lusrmgr.msc for local account management, though most servers use Active Directory for domain-wide user management.

Server-specific uses:

  • Creating service accounts for applications and databases
  • Managing local administrator access for server maintenance
  • Setting up accounts for non-domain users
  • Configuring backup operators and remote access

Server administrators often script user management through PowerShell instead of using the GUI, but lusrmgr.msc remains valuable for quick manual changes.

The tool works identically on Windows Server 2019, 2022, and 2025 as it does on Windows 10/11 Pro editions.

Automating User Management with PowerShell

PowerShell provides more flexibility than lusrmgr.msc for repetitive tasks:

Create multiple users from a CSV file:

Import-Csv users.csv | ForEach-Object {
    New-LocalUser -Name $_.Username -Password (ConvertTo-SecureString $_.Password -AsPlainText -Force) -FullName $_.FullName
}

Add users to groups in bulk:

Get-Content userlist.txt | ForEach-Object {
    Add-LocalGroupMember -Group "Remote Desktop Users" -Member $_
}

Export all users to a text file:

Get-LocalUser | Select-Object Name,Enabled,LastLogon | Export-Csv users_report.csv

Learning basic PowerShell commands supplements lusrmgr.msc nicely. The graphical interface handles quick changes, while scripts handle bulk operations.

For detailed PowerShell user management techniques, Microsoft’s PowerShell documentation offers comprehensive cmdlet references.

Comparing lusrmgr.msc to Third-Party Tools

Built-in Advantages

  • No installation required
  • Free with Windows Pro/Enterprise
  • Directly modifies Windows user database
  • No compatibility concerns
  • Lightweight and fast

Third-Party Alternatives

  • Nirsoft’s UserProfilesView: Shows detailed profile information
  • ManageEngine ADManager Plus: Enterprise-level user management
  • Local User Manager (Home Edition workarounds): Community tools attempting to replicate lusrmgr.msc

Most third-party tools add reporting features, bulk operations, or remote management capabilities. For single-computer user management, lusrmgr.msc provides everything necessary without extra software.

Summary

lusrmgr.msc gives you complete control over Windows user accounts and groups through a simple management console. It works on Pro, Enterprise, and Server editions but doesn’t exist in Home versions.

Open it by pressing Windows key + R, typing lusrmgr.msc, and clicking OK. You can create users, reset passwords, manage group memberships, and configure advanced account properties in seconds.

The tool solves real problems: forgotten passwords get reset immediately, employee accounts get disabled when people leave, and permission issues get diagnosed by checking group memberships. Command-line alternatives exist for Windows Home users or automation needs.

Security matters when managing users. Give people minimum necessary permissions, require strong passwords, audit accounts regularly, and disable unused accounts. These practices prevent unauthorized access and protect your system.

Whether you manage a single computer or a small office network, lusrmgr.msc provides the fastest path to user account management. Master the basics and you’ll save hours compared to clicking through Settings menus or searching for forgotten options.

Frequently Asked Questions

How do I access lusrmgr.msc if I have Windows Home?

Windows Home editions don’t include lusrmgr.msc at all. Microsoft removed it to simplify the interface. Use Settings > Accounts > Family & other users for basic user management, or use Command Prompt commands like net user for advanced operations. Upgrading to Windows Pro adds lusrmgr.msc and costs around $99, but most home users manage fine without it.

Can I recover a user account after deleting it in lusrmgr.msc?

No. Deletion is permanent and immediate. The account’s security identifier (SID) gets removed from Windows, which means even creating a new account with the same name creates a different account. The user’s files stay in C:\Users[username] until you manually delete that folder, but the account itself cannot be restored. Always disable accounts instead of deleting them if there’s any chance you’ll need them later.

What’s the difference between Administrator and Administrators in lusrmgr.msc?

“Administrator” is a specific built-in user account that ships with Windows. It has full system control but Microsoft disables it by default for security. “Administrators” (plural) is a group that contains multiple user accounts. Any user in the Administrators group gets full system permissions. You add regular user accounts to the Administrators group to give them admin rights without using the built-in Administrator account.

Why does lusrmgr.msc show accounts I didn’t create?

Windows creates several system accounts automatically: DefaultAccount, Guest, Administrator, and sometimes WDAGUtilityAccount. These support Windows features and security functions. Hidden accounts like SYSTEM and LOCAL SERVICE don’t appear in lusrmgr.msc but exist in the background. You can safely ignore system accounts, but never delete them as Windows needs them to function properly.

Do changes made in lusrmgr.msc sync across multiple computers?

No. lusrmgr.msc only manages local accounts on the current computer. Changes affect that machine alone. If you need synchronized accounts across multiple computers, you need either a Microsoft Account, Active Directory domain, or Azure AD setup. Large organizations use domain controllers to centrally manage users, while home users can sign in with Microsoft accounts to sync settings between devices.

MK Usmaan
Latest posts by MK Usmaan (see all)