Creating Local User Accounts in Windows 11

Complete Technical Documentation

1. Introduction

This document provides a comprehensive technical guide for creating local user accounts in Windows 11. It covers multiple methods including:

• Creating users via Command Prompt (CMD)
• Creating users via PowerShell
• Creating users from Windows Recovery Environment (WinRE)
• Using the OOBE\BYPASSNRO command during Windows Setup to enable local account creation

This guide is intended for IT administrators, support engineers, and system administrators.

2. Understanding Local vs Microsoft Accounts

Windows 11 encourages the use of Microsoft Accounts (MSA). However, local accounts remain important for:

• Offline environments
• Isolated lab systems
• Kiosk configurations
• Privacy-focused setups
• Corporate imaging workflows

A local account: - Exists only on the device - Does not sync settings to Microsoft cloud - Does not require internet access

3. Method 1 -- Creating a Local User via Command Prompt (CMD)

Requirements:

• Administrator privileges

Steps:

1. Open Start Menu
2. Search for: cmd
3. Right-click → Run as Administrator

Create Standard User:

net user Username Password /add

Example:

net user John Doe123! /add

Add User to Administrators Group:

net localgroup administrators Username /add

This grants full administrative privileges.

Verify User Creation:

net user Username

4. Method 2 -- Creating a Local User via PowerShell

Requirements:

• Administrator privileges

Open PowerShell as Administrator.

Create User:

New-LocalUser -Name "Username" -Password (Read-Host -AsSecureString "Enter Password")

Add to Administrators Group:

Add-LocalGroupMember -Group "Administrators" -Member "Username"

PowerShell provides more flexibility for scripting and automation in enterprise environments.

5. Method 3 -- Creating Local User from Windows Recovery (WinRE)

Useful when locked out of the system.

Steps:

1. At login screen → Hold SHIFT + Click Restart

2. Navigate: Troubleshoot → Advanced Options → Command Prompt

3. Run:

{=html}
<!-- -->

net user RecoveryAdmin StrongPassword! /add net localgroup administrators RecoveryAdmin /add

4. Reboot system
5. Log in with new account

Security Note: This method requires physical access to the device.

6. Method 4 -- Using OOBE\BYPASSNRO During Windows Setup

This is the short command referenced in the original discussion.

Windows 11 Home and some Pro builds require internet + Microsoft Account during setup (OOBE).

The Command:

OOBE\BYPASSNRO

What It Does:

• Adds a registry key enabling Network Requirement Override (NRO)
• Forces system reboot
• Enables "I don't have internet" option
• Allows local account creation

Steps:

1. During Windows Setup (OOBE)
2. When prompted to connect to network
3. Press SHIFT + F10
4. Type:

{=html}
<!-- -->

OOBE\BYPASSNRO

5. Press Enter
6. System reboots
7. Select:
   • I don't have internet
   • Continue with limited setup
8. Create local user account

7. Security Considerations

• Ensure strong passwords
• Avoid leaving recovery accounts enabled permanently
• Disable unused accounts
• Use least privilege principle
• Document emergency accounts properly

8. Enterprise Deployment Considerations

For enterprise deployments consider:

• Using Autounattend.xml
• Using MDT or SCCM
• Using Intune provisioning policies
• PowerShell automation scripts

Local accounts can be preconfigured via unattended setup files.

9. Troubleshooting

SHIFT + F10 does not open CMD

• Check BIOS keyboard settings
• Try external keyboard

OOBE\BYPASSNRO not working

• Ensure correct spelling
• Confirm you are in OOBE phase
• Check Windows build version

Access Denied when using net user

• Ensure CMD is run as Administrator

10. Conclusion

Windows 11 still fully supports local accounts, although Microsoft promotes cloud-based identities.

The quickest method during setup: OOBE\BYPASSNRO

For live systems: net user commands

For automation: PowerShell

Each method serves different administrative scenarios.

End of Document