Why create a dedicated user
Rather than permanently using the built-in Administrator account, creating a dedicated account for everyday work reduces the consequences of a mistake, and lets you give limited access to another person without sharing the administrator credentials.
Creating the account
From Settings > Accounts > Other users, add a new local account. Enter a username and a strong password.
The command-line alternative, through PowerShell as an administrator:
New-LocalUser "myuser" -Password (Read-Host -AsSecureString "Password") -FullName "My User"Allowing RDP sign-in
By default, only members of the Administrators group can sign in over Remote Desktop. To allow a standard account:
- Open sysdm.cpl (System Properties), the Remote tab.
- Click Select Users.
- Add the account you created to the list of users allowed over Remote Desktop.
Granting administrator rights (if needed)
If the account genuinely needs administrative rights, add it to the Administrators group:
Add-LocalGroupMember -Group "Administrators" -Member "myuser"Removing access
Taking an account out of the Remote Desktop Users group (or disabling it entirely from Settings > Accounts) cuts its RDP access immediately, without affecting the other accounts on the system.