Prevent Windows 10 guest users from changing the standard user account password

Locking down the security of standard user accounts is important in any organisation, Windows 10 has made this a little harder for IT departments by stripping out functionality that made this process easy.

In most editions of Windows 10, you can't use "Local users and groups" to set restrictions on user accounts as this functionality has been stripped out and is only available in enterprise editions of Windows 10.

There is however still a way to set user account restrictions in Windows 10 by using Command prompt from an Administrator account, the two main restrictions you'll want to set are disabling changing the password, and setting the password to never expire. I used this to stop the admin password expiring as well so I didnt have the change the password all the time and this kept the admin passwords consistent across multiple laptops.

The following are the commands:

WMIC USERACCOUNT WHERE "Name='Visitor'" SET PasswordExpires=FALSE
WMIC USERACCOUNT WHERE "Name='Visitor'" SET PasswordChangeable=FALSE
WMIC USERACCOUNT WHERE "Name='Admin'" SET PasswordExpires=FALSE

These user account policies are especially useful for places such as community centres, libraries, clubs, not for profits, and other organisations who may need to lock down the security of their devices for members of the public to use

Icons made by Madebyoliver from www.flaticon.com is licensed by CC 3.0 BY