PM & AI Chronicles

From Product Thinking to Prompt Engineering – One Tool at a Time

Managing an OS 💻: Accounts & Access👥🔐

This article is part of the Operating Systems Series — where we explore how OS power and shape the world of computing. If you’d like to know what operating systems are and why they matter, check out the main article: 👉 — Operating Systems: The Hidden Power

Every operating system—like Windows, macOS, Linux, or Chrome OS—has its own special way of helping you manage and use your computer. Even though each one looks a little different, they all try to do the same thing: make your work easier, keep your data safe, and let more than one person use the same device without mixing things up.

Think of an operating system as the manager of your computer. It decides who gets to use it, what they can see, and what actions they can perform. Whether you’re logging in at home or signing into a shared school or office computer, the OS quietly keeps track of each user and their permissions.

In this part of Managing an OS, we’ll look at two key responsibilities of the operating system:

  • User Account Management 👤 — creating, editing, or removing user profiles and keeping everyone’s settings separate.
  • Access Control Management 🔐 — deciding who can open which files, install software, or change system settings.

Together, these ensure your system stays organized, your personal files remain private, and no one accidentally (or intentionally!) changes anything they shouldn’t.

A user account is like your personal ID card inside the operating system. It tells the computer who you are and what you’re allowed to do. Most operating systems require you to log in using a user account before you can start working. Once you sign in, the OS automatically adjusts the environment to match your preferences — things like your desktop background, saved passwords, and favorite apps.

For example, if you and your sibling both use the same laptop, you can each have your own user account. That way, your files and wallpaper stay private, and their settings won’t mix with yours.

Every operating system supports different levels of user accounts, each with its own privileges — special rights that determine what actions that user can take. These privileges are grouped into permissions, allowing administrators to grant limited or full control depending on the user’s needs.

For example, you might want to let your friend use your computer to browse the web, but not to install new programs or change settings — that’s what permissions help with! Here are the three most common user levels:

  • Administrator 👑 — Has full control of the system. Administrators can install or remove software, change settings, manage other user accounts, and access all files.
  • Standard User 👤 — Can use most apps and files, but cannot make system-wide changes or install software that affects all users.
  • Guest 🙋 — Has very limited access and usually can’t install programs or change settings. This type of account is often temporary.

In Windows 11, you can view or edit accounts by opening Settings → Accounts → Family & other users. From there, you can:

  • Add new accounts (family members or other users).
  • Choose whether the account connects to a Microsoft 365 profile.
  • Assign roles such as Administrator or Standard User.

When adding someone new, Microsoft asks for a verifiable email address or phone number — this ensures the user can securely access their account.

On a Mac, you’ll find three main account types — Administrator, Standard, and Sharing Only. To manage them:

  • Open the Apple Menu → System Settings → Users & Groups from the sidebar.
  • Click the Add User (+) button to create a new account.
  • Use the info (ℹ️) icon next to a username to edit their role — for example, make someone an administrator or apply parental controls.

macOS makes it easy to separate personal and shared spaces so everyone can use the same computer safely.

On Linux systems, the options vary slightly depending on the distribution (e.g., Ubuntu, Lubuntu, Fedora). But the concept remains the same: you’ll usually find Admin, Basic User, Guest, or Unprivileged accounts.

The administrator in Linux or Unix systems is often called root, and it’s a powerful account with unrestricted access to everything on the system. It’s so central to Linux that renaming or removing it can break important system functions.

In Lubuntu, for instance, you can manage users by navigating to: Home Menu → Preferences → LXQt Settings → Users and Groups. Here, you can highlight a user and click Properties to edit their permissions or add a new one.

No matter which operating system you use, always protect your user accounts with passwords. Passwords prevent unauthorized access and protect your files from others who might use your device.

The only exception is the Guest account in Windows, which doesn’t have a password because it’s designed for temporary, public use. However, since that can be risky, it’s a good idea to disable the Guest account unless you have a specific reason to keep it on.

Goal: Add a new user account on a Windows 11 PC, then sign in and confirm it works. You’ll learn: Family vs Other users, Microsoft vs Local accounts, and how to make a user an Admin.

Before you start

  • You’re signed in with an Administrator account.
  • PC is connected to the internet (only needed if creating a Microsoft account).
  • Optional: Have the person’s Microsoft email/phone ready if you’ll use a Microsoft account.

Best for parents/kids, shared home PCs, and using Family Safety.

  • Open Settings
    Start → Settings → Accounts → Family (or Family & other users).
  • Add a family member
    Click Add a family member → Sign in.
  • Enter their Microsoft email or phone
    Type it → Next → follow prompts.
  • Choose role
    • Member (standard)
    • Organizer (can manage family settings)
  • Finish
    You’ll see them listed under Family. They’ll complete setup at first sign-in.

Best for guests or non-family users on the device.

  • Open Settings
    Start → Settings → Accounts → Family & other users.
  • Add account
    Under Other users, click Add account.
  • Choose account type
    • Microsoft account: Enter email/phone → Next → finish.
    • Local account (no email): Click I don’t have this person’s sign-in information → Add a user without a Microsoft account.
  • If Local account:
    • Enter Username
    • Enter Password and confirm
    • Pick 3 security questions → Next
  • Done
    The new user appears under Other users.
  • Settings → Accounts → Family & other users.
  • Click the new user → Change account type.
  • Select Administrator → OK.

Tip: Keep everyday users as Standard for safety. Use Admin only when needed.

  • Switch user
    Start → profile picture → Sign out → choose the new user.
  • Complete setup
    • For Microsoft accounts: follow on-screen steps.
    • For local accounts: enter the username/password you created.
  • Create a PIN (recommended)
    When prompted, set up Windows Hello PIN.
  • Confirm the desktop loads and you can open apps.
  • Rename / change password: Settings → Accounts → relevant user → Sign-in options.
  • Remove user: Settings → Accounts → Family & other users → select user → Remove (this deletes that user’s local files—back up first).
  • Family Safety controls: Settings → Accounts → Family or visit family.microsoft.com.

Every user account in an operating system comes with its own level of access — also known as privileges. By default, users are granted just enough permissions to perform everyday tasks such as opening files, running installed apps, or browsing the internet.

However, when it comes to performing system-level changes — such as installing new software, updating drivers, or modifying security settings — the operating system steps in to protect the system. This is where Access Control Management plays an important role.

The main goal is to ensure that only administrators or other trusted users can make significant changes that could affect the entire system. For example, if someone tries to install a new printer driver or change the system firewall rules, the OS checks whether that user has permission to do so before allowing it. This prevents both accidental damage (such as deleting a system file) and malicious actions (such as installing malware without realizing it).

Microsoft uses a feature called User Account Control (UAC) to implement access control in Windows. Here’s how it works:

  • When a user launches a normal app, it runs with standard permissions — even if the person is logged in as an administrator.
  • If that app or action attempts to make system-wide changes (for example, installing new software or editing protected files), Windows immediately pauses the action.
  • A UAC pop-up window appears, asking:
    • “Do you want to allow this app to make changes to your device?”. The user then must choose Yes or No.
  • If the current account is an Administrator, clicking Yes continues the action.
  • If it’s a Standard user, Windows asks for administrator credentials before proceeding.

Windows lets you adjust how strict UAC is, but Microsoft recommends keeping the default level for the best balance between security and convenience.

You can find these settings by going to: Control Panel → User Accounts → Change User Account Control settings.

A slider lets you choose how often Windows should notify you before allowing apps to make changes.

💡 Tip: Keeping UAC turned on helps prevent malware or unapproved software from being silently installed on your system.

Goal: Learn where UAC lives in Windows 11 and what each security level does.
You’ll need: An Administrator account. Steps (Windows 11)

  • Open Control Panel
    Press Win → type Control Panel → Enter.
  • Go to User Accounts
    Click User Accounts → again User Accounts (the inner link).
  • Open UAC settings
    Click Change User Account Control settings.
    A UAC prompt may appear—click Yes.
  • Adjust the slider
    You’ll see a slider with four positions. Move it to each level to read the description in the window:
  • Always notify (Top — Most secure)
    • Notifies whenever apps try to install or make changes and when you change Windows settings.
    • Dims the desktop (Secure Desktop) until you choose Yes/No.
  • Notify me only when apps try to make changes (Default)
    • Notifies when apps attempt changes; doesn’t notify for your own Windows setting changes.
    • Dims the desktop.
  • Notify me only when apps try to make changes (Don’t dim desktop)
    • Same as default, but no dimming (no Secure Desktop).
    • Keeps the screen interactive—slightly less secure, a bit more convenient.
  • Never notify (Bottom — Least secure)
    • No prompts when apps or you make changes.
    • Highest convenience, lowest protection.
  • Pick your level & save
    Choose the desired position → click OK → approve the UAC prompt.
  • (Optional) Test
    • Try performing a task that needs elevation (e.g., install a small trusted app or open Device Manager and attempt a driver update) to observe the prompt behavior at your chosen level.

If unsure, return the slider to the default: “Notify me only when apps try to make changes to my computer” (with dimming).

Even if you’re the only person using your computer, avoid setting UAC to “Never notify.” Leaving UAC enabled provides a vital safety layer — it helps block accidental installations of malware or unwanted software that might try to sneak in while you browse or install programs.

Access Control is one of the OS’s built-in guardians, ensuring only trusted actions and users can make significant changes to your system. Understanding how UAC works gives you better control over both security and convenience.

But access control is just one part of what an operating system manages behind the scenes. In the following article, we’ll explore other essential system management areas — Managing Applications, Processes & Services ⚙️ — where you’ll learn how the OS handles running programs, background services, and active processes to keep everything working smoothly 👉 Processes & Services