RECOMMENDED: Click here to fix Windows errors and optimize system performance
Control questions provide additional protection for your local account in case you forget your password.
- Security questions are available for your local account:
- What was your first pet’s name?
- What is the name of the city you were born in?
- What was your nickname as a child?
- What is the name of the city where your parents met?
- What is the name of your older cousin?
- What is the name of the first school you visited?
If you already have a local account, you can add control questions. If you are installing a new computer with a local account, the installer can help you add these questions and answers directly into your workflow. If after setting up the control questions you can’t remember your password on the login screen, you will see a link to reset your password. When you click on it, you will be prompted to answer your control questions.
However, these security issues can also make the whole process of creating a user account a bit more complicated. In this case you can disable the Windows 10 security questions feature.
Once you disable it, Windows 10 will no longer ask you to configure control questions when creating new local user accounts.
If you do not want to answer control questions when creating a user account, you can enable or disable control questions in Windows 10.
How to Disable Security Questions for Windows 10 Local Account from the Registry Editor
- Before you start, you need to find the unique SID of the local account whose security issues you want to remove. Open a command line with elevated privileges and execute this command:
- wmic useraccount get the name, sid
- Press the Windows + R key combination to open the Run command. Type regedit and press Enter to open the registry editor.
- In the left pane, double-click HKEY_LOCAL_MACHINE to expand it. Right-click the security key and select “Permissions”.
- Select the “Administrators” group and check the “Full access” box in the “Permissions” section. Click OK, then press F5 to update the registry.
- Now go to the key: HKEY_LOCAL_MACHINE \ SECURITY \ Policy \ Secrets. Find a subsection whose name starts with “L $ SQSA” followed by the SID of the desired account. Right-click it and select “Delete” from the context menu.
- Click Yes to confirm.
You have deleted the control questions for the local account. The next time you click “Reset Password” on the Windows 10 login screen, the control questions will no longer appear and you will have to use the drive to reset the password.
From the Group Policy Editor (GPO)
To disable Windows 10 security issues using Group Policy, follow these steps.
- Open the start menu.
- Find “gpedit.msc” and click on the result.
- In the GP editor, go to “Computer Configuration -> Administrative Templates -> Windows Components -> User Interface for Credentials”.
- On the right pane, find the policy “Disable the use of control questions for local accounts” and double-click it.
- Select “On”.
- Click the Apply and OK buttons.
- Close the GP editor.
- Reboot Windows.
You have disabled this function for security reasons.
RECOMMENDED: Click here to troubleshoot Windows errors and optimize system performance
CCNA, Web Developer, PC Troubleshooter
I am a computer enthusiast and a practicing IT Professional. I have years of experience behind me in computer programming, hardware troubleshooting and repair. I specialise in Web Development and Database Design. I also have a CCNA certification for Network Design and Troubleshooting.