Here’s a trick that can protect your PC from malicious attacks. When you first set up a computer, the main account is always an administrator account. This means that the account can install and run anything without restriction.
But you can create a limited account. When you do this, it makes it almost impossible for malicious software to install on your PC. It’s also great if you have multiple users on your computer. This prevents someone from installing a program you don’t want or making changes you don’t like to your settings. It’s called a restricted user account and it can protect your data and your settings. If you have kids using the same computer or if you find you want to limit what can be done on the computer, you may want to look into this option.
Now, let’s look at the process in Windows 10. Click the Start Button and choose Settings.

Select Accounts.

Click Family & other people.

You’ll have two options for adding additional accounts. You can add a family member or add other people. Family members will have their own desktops and sign-in. You’ll also be able to implement parental controls for kids.

Click the plus sign to add another account. If you choose Family, you’ll select between an adult or a child account. And then add the email address. For our purposes, we’ll select Other people. Add the email address you want to use for the account. I had no problem using the same email address I have for my admin account.

You can also create a local account without a Microsoft address, but you won’t be able to access Microsoft services nor will you be able to retrieve your password. To do that click on I don’t have this person’s sign-in information at the bottom.

You’ll get a screen to create a Microsoft account, but just click Add a user without a Microsoft account at the bottom and you’ll create a local account instead. The local account won’t be able to access OneDrive or other Microsoft services automatically.

Now my non-admin account appears under others.

My non-admin account will now be a choice when I log onto Windows 10.

Or I can click on my profile in the Start Menu to switch to that account.

Since the newly created account is a standard account. If a standard user wants to install software or make changes other than the basic changes, they must have the administrator’s password.
Most of us do not need to have an administrative account for our daily computer use, as it is only needed for downloading and installing programs or changing a system setting. And on a limited account, then, all you need to know is the username and password of an Administrative account to install or make the changes. Alternately, on a limited account, any program can typically be run as an Administrator by right-clicking the program, then choosing Run as Administrator. Again, you would need to enter the username and password of an administrative account, but then you have full access.
A WARNING: When setting up and changing user accounts, be certain you do NOT set your only account or all accounts to a standard or limited account. This will not allow you to do anything on your computer that requires administrator privileges.
So, just log on to that Standard account you’ve created for most of your activities. Especially for surfing the Internet.
If you use that Standard account to surf the Internet and read your e-mails, even if a malicious piece of code manages to get through, it can’t make any important changes to our computer. It can’t install and begin to steal your data.
If you do need to install a program or make changes to the settings, you can always switch over the administrator account. Just make sure you remember the username and password for all of your accounts.