Accounts Enable or Disable Use of Security Questions for Local Accounts in Windows 11


  • Staff
Security_Questions_banner.png

When you set up a local account with a password via Settings, you are required by default to select and answer security questions.

Security questions provide an extra layer of protection for your local account in case you forget your password. These security questions are used to verify who you are so you can reset the password of your local account on the sign-in screen if needed.

Available security questions for a local account:
  • What was your first pet's name?
  • What's the name of the city where you were born?
  • What was your childhood nickname?
  • What's the name of the city where your parents met?
  • What's the first name of your oldest cousin?
  • What's the name of the first school you attended?
If wanted, you can disable the use of security questions for local accounts preventing them from being able to reset their password on the sign-in screen.

This tutorial will show you how to enable or disable the use of security questions for local accounts in Windows 10 and Windows 11.


You must be signed in as an administrator to enable or disable security questions for local accounts.



Contents

  • Option One: Enable or Disable Use of Security Questions for Local Accounts in Local Group Policy Editor
  • Option Two: Enable or Disable Use of Security Questions for Local Accounts using REG file


EXAMPLE: Security questions for local accounts enabled and disabled

Local_account_security_questions_enabled.png
Local_account_security_questions_disabled.png






Option One

Enable or Disable Use of Security Questions for Local Accounts in Local Group Policy Editor


The Local Group Policy Editor is only available in the Windows 10/11 Pro, Enterprise, and Education editions.

All editions can use Option Two to configure the same policy.


1 Open the Local Group Policy Editor (gpedit.msc).

2 Navigate to the policy location below in the left pane of the Local Group Policy Editor. (see screenshot below)

Computer Configuration > Administrative Templates > Windows Components > Credential User Interface

Local_account_security_questions_gpedit-1.png

3 In the right pane of Credential User Interface in the Local Group Policy Editor, double click/tap on the Prevent the use of security questions for local accounts policy to edit it. (see screenshot above)

4 Do step 5 (enable) or step 6 (disable) below for what you want.

5 Enable Use of Security Questions for Local Accounts

This is the default setting.


A) Select (dot) Not Configured, click/tap on OK, and go to step 7. (see screenshot below)​

Local_account_security_questions_gpedit-2.png

6 Disable Use of Security Questions for Local Accounts

A) Select (dot) Enabled, click/tap on OK, and go to step 7. (see screenshot below)​

Local_account_security_questions_gpedit-3.png

7 You can now close the Local Group Policy Editor if you like.




Option Two

Enable or Disable Use of Security Questions for Local Accounts using REG file


1 Do step 2 (enable) or step 3 (disable) below for what you would like to do.

2 Enable Use of Security Questions for Local Accounts

This is the default setting


A) Click/tap on the Download button below to download the file below, and go to step 4 below.​

Enable_Use_of_security_questions_for_local_accounts.reg


(Contents of REG file for reference)
Code:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System]
"NoLocalPasswordResetQuestions"=-

3 Disable Use of Security Questions for Local Accounts

A) Click/tap on the Download button below to download the file below, and go to step 4 below.​

Disable_Use_of_security_questions_for_local_accounts.reg


(Contents of REG file for reference)
Code:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System]
"NoLocalPasswordResetQuestions"=dword:00000001

4 Save the REG file to your desktop.

5 Double click/tap on the downloaded REG file to merge it.

6 When prompted, click/tap on Run, Yes (UAC), Yes, and OK to approve the merge.

7 You can now delete the downloaded REG file if you like.


That's it,
Shawn Brink


 

Attachments

  • Security_Questions.png
    Security_Questions.png
    7.6 KB · Views: 11
  • Disable_Use_of_security_questions_for_local_accounts.reg
    680 bytes · Views: 25
  • Enable_Use_of_security_questions_for_local_accounts.reg
    658 bytes · Views: 25

cereberus

Well-known member
Pro User
VIP
Local time
7:44 PM
Posts
3,854
Visit site
OS
Windows 10 Pro + others in VHDs
One of key drivers for disabling the questions is the criticism that anybody knowing the account owner could easily answer the questions.

However, you could just use a simple coding method. Anybody can devise something simple that is still secure e.g. if your place of birth is London, just answer in reverse Nodnol.

Another way perhaps is to prefix answer with letter A say i.e. ALondon.

The possibilities are endless and do not need to be complicated at all.

Of course, you have to remember your encoding method LOL.

The odds of somebody even realising you have encoded your answer is extremely remote.
 

My Computer

System One

  • OS
    Windows 10 Pro + others in VHDs
    Computer type
    Laptop
    Manufacturer/Model
    ASUS Vivobook 14
    CPU
    I7
    Motherboard
    Yep, Laptop has one.
    Memory
    16 GB
    Graphics Card(s)
    Integrated Intel Iris XE
    Sound Card
    Realtek built in
    Monitor(s) Displays
    N/A
    Screen Resolution
    1920x1080
    Hard Drives
    1 TB Optane NVME SSD, 1 TB NVME SSD
    PSU
    Yep, got one
    Case
    Yep, got one
    Cooling
    Stella Artois
    Keyboard
    Built in
    Mouse
    Bluetooth , wired
    Internet Speed
    72 Mb/s :-(
    Browser
    Edge mostly
    Antivirus
    Defender
    Other Info
    TPM 2.0

Bree

Well-known member
Guru
VIP
Local time
7:44 PM
Posts
9,165
Location
S/E England, UK
Visit site
OS
Windows 11 Home
However, you could just use a simple coding method....
...The possibilities are endless and do not need to be complicated at all.
Or you could just use Netplwiz to create a new account. That won't ask for security questions.

1674088089488.png
1674088106601.png
1674088144576.png
 

My Computers

System One System Two

  • OS
    Windows 11 Home
    Computer type
    Laptop
    Manufacturer/Model
    Acer Aspire 3 A315-23
    CPU
    AMD Athlon Silver 3050U
    Memory
    8GB
    Graphics Card(s)
    Radeon Graphics
    Monitor(s) Displays
    laptop screen
    Screen Resolution
    1366x768 native resolution, up to 2560x1440 with Radeon Virtual Super Resolution
    Hard Drives
    1TB Samsung EVO 870 SSD
    Internet Speed
    50 Mbps
    Browser
    Edge, Firefox
    Antivirus
    Defender
    Other Info
    fully 'Windows 11 ready' laptop. Windows 10 C: partition migrated from my old unsupported 'main machine' then upgraded to 11. A test migration ran Insider builds for 2 months. When 11 was released on 5th October it was re-imaged back to 10 and was offered the upgrade in Windows Update on 20th October. Windows Update offered the 22H2 Feature Update on 20th September 2022.

    My SYSTEM THREE is a Dell Latitude 5410, i7-10610U, 32GB RAM, 512GB ssd, supported device running Windows 11 Pro.

    My SYSTEM FOUR is a 2-in-1 convertible Lenovo Yoga 11e 20DA, Celeron N2930, 4GB RAM, 128GB ssd. Unsupported device: currently running Win10 Pro, plus Win11 Pro 22H2 Insider Beta, and the release build of Win11 22H2, both as native boot vhdx.

    My SYSTEM FIVE is a Dell Latitude 3190 2-in-1, Pentium Silver N5030, 4GB RAM, 128GB NVMe ssd, supported device running Windows 11 Pro.
  • Operating System
    Windows 11 Pro
    Computer type
    Laptop
    Manufacturer/Model
    Dell Lattitude E4310
    CPU
    i5 M 520
    Motherboard
    0T6M8G
    Memory
    8GB
    Screen Resolution
    1366x768
    Hard Drives
    500GB HDD
    Browser
    Firefox, Edge
    Antivirus
    Defender
    Other Info
    unsupported machine: Legacy bios, MBR, TPM 1.2, upgraded from W10 to W11 using W10/W11 hybrid install media workaround. In-place upgrade to 22H2 using ISO and a workaround.

    My SYSTEM THREE is a Dell Latitude 5410, i7-10610U, 32GB RAM, 512GB ssd, supported device running Windows 11 Pro.

    My SYSTEM FOUR is a 2-in-1 convertible Lenovo Yoga 11e 20DA, Celeron N2930, 4GB RAM, 128GB ssd. Unsupported device: currently running Win10 Pro, plus Win11 Pro 22H2 Insider Beta, and the release build of Win11 22H2, both as native boot vhdx.

    My SYSTEM FIVE is a Dell Latitude 3190 2-in-1, Pentium Silver N5030, 4GB RAM, 128GB NVMe ssd, supported device running Windows 11 Pro.

Brink

Administrator
Staff member
MVP
Thread Starter
Local time
2:44 PM
Posts
8,406
Visit site
OS
Windows 11 Pro for Workstations

My Computers

System One System Two

  • OS
    Windows 11 Pro for Workstations
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom self build
    CPU
    Intel i7-8700K 5 GHz
    Motherboard
    ASUS ROG Maximus XI Formula Z390
    Memory
    64 GB (4x16GB) G.SKILL TridentZ RGB DDR4 3600 MHz (F4-3600C18D-32GTZR)
    Graphics Card(s)
    ASUS ROG-STRIX-GTX1080TI-O11G-GAMING
    Sound Card
    Integrated Digital Audio (S/PDIF)
    Monitor(s) Displays
    2 x Samsung Odyssey G75 27"
    Screen Resolution
    2560x1440
    Hard Drives
    1TB Samsung 990 PRO M.2,
    1TB Samsung 980 PRO M.2,
    6TB WD Black WD6001FZWX
    8TB WD MyCloudEX2Ultra NAS
    PSU
    Seasonic Prime Titanium 850W
    Case
    Thermaltake Core P3 wall mounted
    Cooling
    Corsair Hydro H115i
    Keyboard
    Logitech wireless K800
    Mouse
    Logitech MX Master 3
    Internet Speed
    1 Gbps Download and 35 Mbps Upload
    Browser
    Google Chrome
    Antivirus
    Microsoft Defender and Malwarebytes Premium
    Other Info
    Logitech Z625 speaker system,
    Logitech BRIO 4K Pro webcam,
    HP Color LaserJet Pro MFP M477fdn,
    Linksys EA9500 router,
    Motorola MB8611 cable modem,
    APC SMART-UPS RT 1000 XL - SURT1000XLI,
    Galaxy S20 Ultra 5G phone
  • Operating System
    Windows 11 Pro for Workstations
    Computer type
    Laptop
    Manufacturer/Model
    HP Spectre x360 2in1
    CPU
    i7-1065G7 3.9 GHz
    Memory
    16 GB LPDDR4-3200
    Graphics card(s)
    Intel Iris Plus
    Sound Card
    Intel SST
    Monitor(s) Displays
    13.3" 4K UWVA AMOLED multitouch
    Screen Resolution
    3840 x 2160
    Hard Drives
    512 GB PCIe NVMe M.2 SSD
    Browser
    Google Chrome
    Antivirus
    Windows Defender and Malwarebytes Premium

ThrashZone

Minor Threat
Power User
VIP
Local time
2:44 PM
Posts
1,412
Visit site
OS
Linux-Mint-Cinnamon-20.2 Win-7-10-11Pro's
Hi,
Nice one I hate going threw these dumb questions I usually just use the same answer "same" lol :cool:
 

My Computer

System One

  • OS
    Linux-Mint-Cinnamon-20.2 Win-7-10-11Pro's
    Computer type
    PC/Desktop
    Manufacturer/Model
    asus x3
    CPU
    10900k & 9940x & 5930k
    Motherboard
    z490-Apex & x299-Apex & x99-Sabertooth
    Memory
    Trident-Z Royal 4000c16 2x16gb & Trident-Z 3600c16 4x8gb & 3200c14 4x8gb
    Graphics Card(s)
    Titan Xp & 1080ti FTW3 & evga 980ti gaming
    Sound Card
    Onboard Realtek x3
    Monitor(s) Displays
    1-AOC G2460PG 24"G-Sync 144Hz/ 2nd 1-ASUS VG248QE 24"/ 3rd LG 43" series
    Screen Resolution
    1920-1080 not sure what the t.v is besides 43" class scales from 1920-1080 perfectly
    Hard Drives
    To many to list
    PSU
    1000p2 & 1200p2 & 850p2
    Case
    D450 x2 & 1 Test bench in cherry Entertainment center
    Cooling
    Custom water loops x3 with 2x mora 360mm rads only 980ti gaming air cooled
    Keyboard
    G710+x3
    Mouse
    Redragon x3
    Internet Speed
    xfinity gigabyte
    Browser
    Firefox
    Antivirus
    mbam pro

Latest Support Threads

Top Bottom