A local administrator account can access anything on the system, and any malware they encounter can use the administrator permissions to potentially infect or damage any files on the system. You should use an account that does not have administrative privileges for normal day-to-day computer work, and only use an administrator account when you specifically need administrator permissions. 

 

For Windows 10

Create a new local user account that is not an administrator.

  1. Select Start  > Settings  > Accounts and then select Family & other users. (In some versions of Windows you'll see Other users.)
  2. Select Add someone else to this PC.
  3. Select I don't have this person's sign-in information, and on the next page, select Add a user without a Microsoft account.
  4. Enter a user name, password, or password hint—or choose security questions—and then select Next.
  5. Sign in with the new account


For Windows 11

Create a new local user account that is not an administrator.

  1. Select Start > Settings > Accounts and then select Family & other users. (In some versions of Windows you'll see Other users.)
  2. Next to Add other user, select Add account. 
  3. Select I don't have this person's sign-in information, and on the next page, select Add a user without a Microsoft account.
  4. Enter a user name, password, or password hint—or choose security questions—and then select Next.