Audit local account security
On a canned Windows 11 workstation, use three read-only commands to list local accounts, read the local Administrators membership, and display password and lockout policy. Interpret the sample output for a least-privilege review without creating or modifying an account. The simulation does not inspect or change the learner's device. Practice, not exam questions. Not a score predictor. Nothing taken from any exam.
The steps on this page are free to read. The hands-on lab for this procedure is included with Academy.
Steps
- 1
Run net user. Confirm the header names the canned workstation, then inventory every account in the account-name grid before the success line.
- 2
Run net localgroup administrators. Read the Members section and flag each listed principal for role and least-privilege validation; do not add or remove a member.
- 3
Run net accounts. Record the password-age, minimum-length, history, lockout threshold, duration, observation-window, and computer-role values shown in the canned policy block.
What you should see
net user prints the workstation header, account-name grid, and successful-completion line. net localgroup administrators prints Alias name, Comment, and a populated Members section. net accounts prints every password and lockout label plus Computer role. Each command ends with The command completed successfully.