Windows 10 Accounts

Types of Windows 10 Accounts

Windows 10 User Account Types

1. Local Account
• Built-in Account
• User-defined Account
2. Domain Account
3. Domain (Azure AD) Account
4. Microsoft Account

1. Local Account
• Locale Account provides access to Windows 10 device.
• A local account is a username and password combination that you have used to log into any of the legacy Windows 10 operating systems.
• This type of account is suitable for home users and small companies that do not have a need for domain.
• A local account is used to provide access to non-domain or Workgroup Computer.
• Users are created on a local computer, the User database is stored inside the local computer's registry that is SAM (Security Accounts Manager).
• A fresh installed Windows 10 machine, you can find 2 types of Built-in Account also known as Default Accounts, they are....
•  Administrator 
• Guest

 (Administrator and Guest Accounts are disabled by default and you cannot delete the built-in account).

• A built-in Administrator account is the super user account but this account cannot run Edge Browser. 

Local Account Benefits and Features

First you have to permission Administrator Privilege

• Secure:- You Create a complesx and nowhere else.
• Private:- Your setting and computer users don't transmit to remote servers. Everything is stored locally on one computer.
• Custom login name:- You Custom Your Login name every time.

• Assigned Access:- 
• Assigned Access is a security feature for local accounts created on a Windows 10 machine.
• An Assigned Access allows to create a lockdown environment for users to interact with only one app.
• The Logged-in user cannot close to switch between multiple Apps.
• Steps for Assigned Access are:-
1. Create a local account for user account in Windows 10 PC.
2. Use the windows key+I to open the setting app.
3. Click Accounts. And click Family & other people.
4. Under other users, Click the setup assigned access link.
5. Click the choose an account button, and select the standard account you want to assign to run a single app.
6. Click the chose an app button and select the supported app to run on Assigned asscess. and Restart Your computer and the sign-in with account you just configured.

                         (Once you're done using the account, because you don't have access to the Start menu, you will need to use the CTRL+ALT+DEL keyboard shortcut to sing out of the Account.)

• Creating Local User Account:- 
• The steps to create the local user accounts are.
• On a windows 10 Machine, Login with super user Credentials.
• Press on keyboard Windows key + R type lusrmgr.msc
• Navigate to open the option "users" Right click
• The image marked as , shows the option to create a New User.
• The image marked as , is a continuation step of image . it allows you to type desired username and password.

    

  2.   Domain Account

• Domain user accounts refer to user accounts connected to an enterprise network, with windows as a domain controller.
• By default the Administrators group consists of Domain Admins and enterprise Admins.
• A Domain is a logical Boundary inside the company, any user created on Domain Controller Machine is termed as a Domain Account.
• A domain account is used to provide access to windows 10 device to access corporate resources.
• The domain user and Domain guest are the other types of accounts available.
• A domain account is authenticated by a centralized domain controller and can be customized by Group Policy.

• Types of Domain Accounts are:-
1. Administrators
• Domain Admins and Enterprise Admins
2. Domain Users
3. Domain guests etc.
• Methods to log on Domain:-
1. A domain user can log in to a Windows 10 (Domain Computer) in Following four methods.
• Username and Password - A user can type his username and Password
• smart card and PIN (personal identification number).
• Virtual Smart card + PIN. (note - Virtual smart card technology from Microsoft offers comparable security benefits to physical smart cards by using Two-Factor authentication. Virtual smart cards emulate the functionality of physical smart cards, but they use the Trusted Platform Module (TPM) chip that is available on computers in many organizations)
• Windows Hello and Microsoft Passport.

     

3.  Domain (Azure AD) Account

• Azure AD (Active Directory) is the Microsoft Active Directory in cloud. The complete infrastructure and services of Azure AD is manage by Microsoft, since it is a cloud based service.
• Azure Active Directory is a fully managed multi-tenant service from Microsoft that offers identity and access capabilities for applications running in Microsoft Azure and applications running in an on-premises environment.
• Microsoft ensures that Azure AD is highly available and accessible to everyone across the globle.

  

  4.  Microsoft Accounts

• Microsoft Account can be Outlook.com, Live.com, Xbox Live, Technet, Windows live, Hotmail, One Drive, or Windows Messenger.
• Microsoft has combined these services, providing automatic access to a single email Address and password.
• It providing Full access Microsoft Store for downloading and installing Apps.
• It is used to sync selected data and settings across multiple devices.
• It Automatic access to One Drive, Mail , Calendar and people and other Microsoft Software.
• After adding Microsoft account you can access windows store and can perform voice search in Cortana.