The Windows net user command can list accounts and manage local user details from a command prompt. Start with read-only checks. Creating accounts or changing their status needs administrator rights, and a local account is different from an online Microsoft or organization-managed identity.
List users and inspect one account
Open Command Prompt, or a Command Prompt tab in Windows Terminal, and run:
net user
net user "ExampleUser"Replace ExampleUser with the actual local account name. The first command lists accounts; the second shows information about one account. Microsoft’s Net User reference documents the available options and supported Windows versions.
Common commands and their effects
| Command | Purpose |
|---|---|
net user |
List user accounts on the current computer. |
net user "ExampleUser" |
Read one account’s details. |
net user "ExampleUser" * /add |
Create a local account and prompt for a password. |
net user "ExampleUser" * |
Set a local account password through a prompt. |
net user "ExampleUser" /active:no |
Disable that account. |
net user "ExampleUser" /active:yes |
Enable that account. |
Make changes carefully
For an authorized change on your own PC, open Terminal or Command Prompt as administrator. Confirm the exact account name first. The asterisk requests a password interactively, so you do not have to put the password directly in the command line.
A newly created local account is not automatically an administrator. Do not enable the built-in Administrator account merely to solve an ordinary login problem. Keep a working administrator account available and do not disable the only account that can manage the machine.
Use a reset only when appropriate for that local account. Administrator password resets can affect access to some encrypted data or stored credentials. If the person can sign in and change their own password normally, that is preferable to an unnecessary administrative reset.
What this command does not do
It does not display the user’s existing password and is not the way to change a Windows Hello PIN or reset an online Microsoft account password. The /domain option targets a domain context; it is not a shortcut for managing every cloud work account. On an organization-owned device, follow IT procedures.
Access denied commonly means the operation needs elevation or your account is not authorized. A user-not-found error calls for checking the exact account name and context. For the broader choice between Settings and command-line tools, see our Windows account-management guide. Do not repeat a changing command until you know whether the first attempt succeeded.
Frequently asked questions
Can Net User reveal an existing password?
No. It can show account information and set an appropriate local password, but it does not reveal the old one.
Why do I get Access denied?
The operation may require an elevated prompt, or your account may lack permission. Check authorization before retrying.
Does adding a local user make it an administrator?
No. Account creation and administrator-group membership are separate changes.
Can this reset my Microsoft account or Windows Hello PIN?
Use the appropriate Microsoft account recovery or Windows sign-in settings instead. They are different from a local account password.