Windows 10用户管理最重要的规则之一是在您的帐户上使用安全密码。(use a secure password)您不应与其他 PC 用户共享您的密码，尤其是当他们拥有自己的Microsoft帐户时。如果他们不这样做，如果他们要经常使用您的 PC ，您可以在没有 Microsoft 帐户的情况下设置 Windows 10 。(set up Windows 10 without a Microsoft account)
但是，对于来宾用户，您可能不想每次都设置一个全新的用户帐户。您可以做的是设置一个专用的Windows 10来宾帐户。此帐户对设置的访问权限有限，但允许用户运行已安装的软件并访问 Internet。
为什么要使用 Windows 10 访客帐户(Why to Use a Windows 10 Guest Account)
以前版本的Windows提供了一个专用的来宾帐户作为标准功能。那是在智能手机和平板电脑等便携式设备尚未成为现实的时代，因此与朋友或家人共享您的 PC 更有意义。
不幸的是，微软为(Microsoft)Windows 10取消了此功能。要创建Windows 10来宾帐户，您需要创建标准本地帐户（取消链接到任何Microsoft帐户）并设置正确的用户条件以防止管理访问，例如安装新应用程序或更改系统设置的能力。
这很重要，因为不是每个人都有自己的 PC 或移动设备。您可能有家人来访，他们需要访问互联网，但您不愿意共享自己的用户帐户。或者，您可能是一位企业主，需要一台具有受限用户帐户的 PC，可供来宾使用。
由于没有适用于Windows 10(Windows 10)用户的内置访客帐户，您将不得不即兴发挥。按照以下步骤，您可以创建标准的Windows 10本地用户帐户，并将其放置在应用了限制的来宾用户权限组中。
一旦此本地帐户就位，您就可以在每次使用时擦除配置文件数据。这意味着用户之间不会保存任何数据，从而确保为您的客人提供一个安全的沙盒环境，与您自己的设置和数据保持隔离。
创建 Windows 10 来宾帐户(Creating a Windows 10 Guest Account)
正如我们所提到的，在Windows 10上创建来宾帐户涉及创建本地用户帐户并通过将其添加到来宾(Guests)用户组来限制对其的访问。您可以使用Windows PowerShell工具来执行此操作。
去做这个：
- 右键单击(Right-click)Windows 开始(Windows Start)菜单，然后按Windows PowerShell (Admin)选项。
- 在新的PowerShell窗口中，键入net user guestuser /add /active:yes 并按Enter。这将创建一个名为guestuser的新本地用户帐户。您可以将guestuser替换为另一个用户名，但您不能使用guest，因为这是一个受限短语。
- 您需要为您的访客用户帐户设置密码。为此，请键入net user guestuser *并按 Enter。将guestuser替换为您使用的用户名。如果要添加密码，请在下一阶段提供密码，否则在键盘上按两次Enter键以确认该帐户没有密码。
- 默认情况下，新用户会添加到标准用户组 ( Users )。您需要通过键入net localgroup users guestuser /delete 来删除来宾帐户来删除它。
- 从用户(Users)用户组中删除来宾用户帐户后，您需要将其添加到来宾(Guests)用户组。这是一个在Windows 10(Windows 10)中通常不使用的用户组，但该组中的用户对系统设置的访问受到限制，并且无法安装或删除软件。为此，请输入net localgroup guests guestuser /add。
- 创建新的来宾用户帐户并在来宾用户(Guests user)组中后，您需要登录它才能完全创建用户配置文件。您可以通过右键单击“开始(Start)”菜单并单击“Shut down or sign out > Sign out ”按钮退出当前用户帐户。
您的新Windows 10来宾帐户将出现在登录屏幕上，可供您（和您的来宾）开始使用。
重置 Windows 10 来宾帐户的用户配置文件(Resetting the User Profile for a Windows 10 Guest Account)
此时，您的新Windows 10来宾帐户应该可以使用了。但是，与任何典型的用户帐户一样，对其所做的任何更改都将保存给下一个用户。
由于访客帐户通常由不同的人使用，因此您需要在每次使用后重置用户配置文件。执行此操作的一种方法（如果您的 PC 仅供访客使用）是使用Reboot Restore Rx等软件来创建冻结的 PC 设置。该软件将阻止对您的 PC 进行的任何更改，并在每次重新启动时恢复之前的状态。
但是，这仅对专用于来宾使用的Windows PC有用。(Windows PCs)如果您与访客用户使用同一台 PC，则需要在每次使用后手动重置访客帐户的用户配置文件。您可以从“系统属性(System Properties)”菜单执行此操作。
- 首先，您需要打开“运行”(Run)对话框。为此，请按Windows key + R，或右键单击“开始(Start)”菜单并按“运行”(Run)选项。
- 在“运行”(Run)对话框中，键入systempropertiesadvanced，然后按“确定(OK)”启动。这将打开系统属性(System Properties)菜单。
- 在“系统属性(System Properties)”菜单的“高级(Advanced)”选项卡中，按“用户配置文件”(User Profiles)部分的“设置”(Settings)按钮。
- 在“用户配置文件”(User Profiles)窗口中，将列出您的用户帐户列表。为您的访客帐户选择用户配置文件，然后按删除(Delete)按钮。
- 您需要确认您要删除用户个人资料。在Confirm Delete框中按Yes以确认此选择。
通过删除您的 Windows 10 来宾帐户的用户配置文件，对其所做的任何更改（包括桌面背景的更改、任何以前的浏览器历史记录等）都将被删除。下次来宾用户登录时，配置文件将重新生成，使其看起来像一个全新的用户帐户。
创建对客人安全的 Windows 10 PC(Creating a Windows 10 PC That Is Safe For Guests)
借助 Windows 10 PC 上的专用来宾帐户，您不再需要担心为朋友、家人、来宾等提供自己的帐户以供使用。此类帐户的访问权限有限，但您的客人可以正常使用这些帐户进行基本的网页浏览或运行已安装的应用程序或游戏。
如果您的客人自带设备，请确保通过限制对您的连接的访问来确保您家人的安全。(keep the rest of your family safe)许多住宅网络路由器支持访客网络功能，允许访客设备的连接受限。如果您想限制对单个应用程序的访问，您可以将 Windows 10 设置为展台模式(set up Windows 10 in kiosk mode)。
How to Create a Windows 10 Guest Account
One of the most important rules of Windows 10 user management is to use a secure password on your account. You shouldn’t share your password with other PC users, especially if they have their own Microsoft accounts. If they don’t, you can set up Windows 10 without a Microsoft account if they’re going to use your PC often.
For guest users, however, you probably don’t want to go to the trouble of setting up an entirely new user account each time. What you can do instead is set up a dedicated Windows 10 guest account. This account has limited access to settings, but will allow users to run already installed software and access the internet.
Why to Use a Windows 10 Guest Account
Previous versions of Windows offered a dedicated guest account as a standard feature. This was in the days where portable devices like smartphones and tablets weren’t yet a reality, so sharing your PC with friends or family made more sense.
Unfortunately, Microsoft scrapped this feature for Windows 10. To create a Windows 10 guest account, you need to create a standard local account (unlinked to any Microsoft account) and set up the right user conditions to prevent administrative access, such as the ability to install new apps or change system settings.
This is important, because not everybody has their own PC or mobile device. You may have family visiting who need to access the internet, but you’re reluctant to share your own user account. Alternatively, you may be a business owner who needs a PC with a restricted user account available for guests.
With no built-in guest account available for Windows 10 users, you’ll have to improvise. Following the steps below, you can create a standard Windows 10 local user account and place this in a guest user permissions group with restrictions applied.
Once this local account is in place, you can then wipe the profile data each time it’s used. This means that no data is saved between users, ensuring a safe, sandbox environment for your guests that remains isolated from your own settings and data.
Creating a Windows 10 Guest Account
As we’ve mentioned, creating a guest account on Windows 10 involves creating a local user account and restricting access to it by adding it to the Guests user group. You can do this by using the Windows PowerShell tool.
To do this:
- Right-click the Windows Start menu and press the Windows PowerShell (Admin) option.
- In the new PowerShell window, type net user guestuser /add /active:yes and press Enter. This will create a new local user account named guestuser. You can replace guestuser with another username, although you can’t use guest as this is a restricted phrase.
- You’ll need to set a password for your guest user account. To do this, type net user guestuser * and press enter. Replace guestuser with the username you use. If you want to add a password, provide one at the next stage, otherwise press the Enter key twice on your keyboard to confirm the account has no password.
- By default, new users are added to the standard user group (Users). You’ll need to remove the guest account from this by typing net localgroup users guestuser /delete to remove it.
- Once the guest user account has been removed from the Users user group, you’ll need to add it to the Guests user group. This is a user group that is typically unused in Windows 10, but users in this group have restricted access to system settings and can’t install or remove software. To do this, type net localgroup guests guestuser /add.
- With your new guest user account created and in the Guests user group, you’ll need to sign into it to create the user profile fully. You can sign out of your current user account by right-clicking the Start menu and clicking the Shut down or sign out > Sign out button.
Your new Windows 10 guest account will appear on the sign-in screen, ready for you (and your guests) to begin using.
Resetting the User Profile for a Windows 10 Guest Account
At this point, your new Windows 10 guest account should be ready to use. Like any typical user account, however, any changes made on it will be saved for the next user.
Since a guest account will typically be used by different people, you’ll need to reset the user profile after each use. One way to do this (if your PC is only for guest use) is to use software like Reboot Restore Rx to create a frozen PC setup. This software will block any changes to your PC, restoring the previous state on each reboot.
This is only useful for Windows PCs which are dedicated to guest use, however. If you’re using the same PC as guest users, you’ll need to reset the user profile for your guest account manually after each use. You can do this from the System Properties menu.
- To start, you’ll need to open the Run dialog box. To do this, press the Windows key + R, or right-click the Start menu and press the Run option.
- In the Run dialog box, type systempropertiesadvanced, then press OK to launch. This will open the System Properties menu.
- In the Advanced tab of the System Properties menu, press the Settings button for the User Profiles section.
- In the User Profiles window, a list of your user accounts will be listed. Select the user profile for your guest account, then press the Delete button.
- You’ll need to confirm that you want to delete the user profile. Press Yes in the Confirm Delete box to confirm this choice.
By deleting the user profile for your Windows 10 guest account, any changes made to it (including a change in desktop background, any previous browser history, and more) will be erased. The next time a guest user signs in, the profile will be regenerated, making it seem like an entirely fresh user account.
Creating a Windows 10 PC That Is Safe For Guests
With a dedicated guest account on your Windows 10 PC, you no longer need to worry about offering up your own account for friends, family, guests, and more to use. Accounts like these have limited access, but will work fine for your guests to use for basic web browsing or to run already installed apps or games.
If your guests bring their own devices, make sure to keep the rest of your family safe by limiting access to your connection. Many residential network routers support a guest network feature, allowing a restricted connection for guest devices. If you want to limit access to a single app, you could set up Windows 10 in kiosk mode instead.
