Manage User Groups and Admins with lusrmgr.msc

Managing local user accounts and group memberships is essential for maintaining system security and access control in Windows 11. The Local Users and Groups console (lusrmgr.msc) provides advanced control over permissions, allowing system administrators to create custom user groups, assign administrative privileges, and revoke elevated access. Note that this built-in management snap-in is available in Windows 11 Pro, Enterprise, and Education editions.

Opening the Local Users and Groups Console

  1. Press Windows Key + R to open the Run dialog box.
  2. Type lusrmgr.msc into the text box and press Enter (or click OK).
  3. If prompted by User Account Control (UAC), click Yes to grant administrative access.

Adding a User to the Administrators Group

Granting administrative rights elevates a standard user account, allowing it to install software, modify system files, and change global configuration settings.

Method 1: Via the Groups Folder

  1. In the left navigation pane of lusrmgr.msc, click on the Groups folder.
  2. Double-click the Administrators group in the center pane.
  3. Click the Add… button in the properties window.
  4. Under “Enter the object names to select,” type the exact username of the account you want to elevate.
  5. Click Check Names to validate the account name.
  6. Click OK, then click Apply and OK to save the changes.

Method 2: Via the Users Folder

  1. In the left pane, click on the Users folder.
  2. Double-click the target user account in the center pane.
  3. Switch to the Member Of tab.
  4. Click Add…, type Administrators, and click Check Names.
  5. Click OK, then click Apply and OK.

Removing Administrative Rights from a User

  1. In the left pane, open the Groups folder.
  2. Double-click the Administrators group.
  3. In the Members list, select the user account you wish to demote.
  4. Click the Remove button.
  5. Click Apply, then click OK.

Creating a New Local User Group

Custom local groups allow you to organize users and apply consistent access permissions across files, folders, and system resources.

  1. Right-click the Groups folder in the left pane and select New Group….
  2. Enter a Group name (e.g., Project_Editors) and an optional Description.
  3. Click the Add… button to select users who should belong to this group.
  4. Type the usernames, click Check Names, and click OK.
  5. Click Create to finalize the group, then click Close.

Modifying or Deleting Local Groups