Bypass Family Settings by conversion to Local Account

Page 1 of 3 123 LastLast

  1. DQL
    Posts : 10
    Windows 10
       #1

    Bypass Family Settings by conversion to Local Account


    I just upgraded all my computers to Windows 10.

    My 15 year old is clever enough to bypass the (new) Family settings controlled Microsoft Account I just set up for him by converting the account to a local account. This seems to let him play as long as he wants, without time restrictions. I didn't get an email about this, or any other notification. This is the second time he has done it.

    Why is it so easy to completely bypass all the family safety settings it took me hours(!) to finally get set up?

    Also the Family Recent Activity shown on my Microsoft Account web site doesn't seem to update itself. It is at least two or three days behind, perhaps more. How often does Recent Activity update? Is it supposed to be near instantaneous?
      My Computer


  2. Posts : 17,661
    Windows 10 Pro
       #2

    What you describe should be impossible. To test this I just now created a child account on my PC and signing in to it tried to change it to either an admin account or a local account. Could not do that.

    The only way your son can change his account to a local account and "remove" it from Family, or create a new account is to have access to an admin account on that same PC (your account), or alternatively access to your admin MS account's Family settings online. For that he needs both your MS account username and password. It means that if you protect your own personal admin account (MS account) with a strong password and especially the Two-Step Verification, he has no way to access that account and he should not be able / is not able to change your Family settings or his account status.

    Kari
      My Computer


  3. DQL
    Posts : 10
    Windows 10
    Thread Starter
       #3

    This is Windows 10 - when I create new local accounts, I only see "admin" or "standard" type of accounts. What do you mean when you say "child" account?

    I upgraded the PC from Windows 7 (that had local family control features that, while limited, at least functioned as advertised). So all the accounts came from that upgrade.

    The account in question was a standard local account, that I converted to a "Microsoft account" for a child, because that is the only way in Windows 10 to get family settings controls. I see it in my Family settings online, and can (apparently) control screen time, etc. When I log in to it on the computer and go to Settings, I also see I have the ability there to return it to a local account.

    All of this without any access to my admin account at all. I can take a video of the entire process from start to finish, here if you need convincing. It would probably be about a 45 minute video, what with all the confirmation codes, creating garbage emails just for Microsoft, etc.

    Also, please answer my other question regarding the rate of updates to family settings "recent activity". Is it once a day, once a week, whenever the activity report is emailed???

    Thanks for looking into this. I would appreciate it if you would not dismiss it as user error.
      My Computer


  4. Posts : 17,661
    Windows 10 Pro
       #4

    DQL said:
    This is Windows 10 - when I create new local accounts, I only see "admin" or "standard" type of accounts. What do you mean when you say "child" account?
    I assumed that you had created a child (family) account, not creating a local normal account then converting it.

    In your case I would simply copy his personal stuff to an external backup drive, remove his account and start from scratch. Takes a few minutes but in doing so you get better control.

    When you have removed his account, this is Phase 1 in recreating a controlled child account to him: Child Account - Add or Remove from Your Family in Windows 10 - Windows 10 Forums. When done, restore his personal content to respective folders under his user profile folder.

    Doing this he has no way to switch to a local account.

    Then, the more you have patience to read, the more practical tips you will get:


    Kari
    Last edited by Kari; 01 Feb 2016 at 15:49. Reason: Fixed some of the worst typos.
      My Computer


  5. DQL
    Posts : 10
    Windows 10
    Thread Starter
       #5

    Thanks Kari.

    I copied their User folders so I could restore them later.
    I deleted their accounts on the computer.
    I removed them from my Microsoft Account "Family" online, to "start from scratch".
    I went to "Settings" on my PC and added them as a child account.
    I logged into their email and accepted the Family request.
    I then logged into their new child account. Before restoring their User folders.

    Guess what? They can still log in with a local account.

    This "local account" option that lets them bypass child controls so easily seems to be sticky. As if it is stored with the Microsoft Account. That I needed to create in Windows10. To enable child settings control.

    I guess nobody at Microsoft thought of the use-case of somebody upgrading from Windows7 to Windows10 with EXISTING child accounts.

    What would you suggest now? Create NEW, DIFFERENT Microsoft accounts using other garbage emails?
      My Computer


  6. DQL
    Posts : 10
    Windows 10
    Thread Starter
       #6

    If it matters, there is another computer downstairs on which they also have Microsoft accounts.
      My Computer


  7. Posts : 17,661
    Windows 10 Pro
       #7

    DQL said:
    Guess what? They can still log in with a local account.
    Not personally using Family accounts (multiple time divorced, no kids ) I had to ask an expert's opinion in this. Here's what he answered, direct quote from a message:

    A child account will be able to switch to a local account, but the Family icon will still show in the notification area, and Family restrictions will still be enforced.
    Note: the above in situation where the Child account is created "by the book", not converting a local account to an MS account first.
      My Computer


  8. DQL
    Posts : 10
    Windows 10
    Thread Starter
       #8

    Does it still create activity reports if it is a local account?

    In order to block a program, they need to run the program, and I need to see it in the activity report. So if the local account doesn't create activity reports then blocking programs is effectively disabled. This is why my son made the change - so I couldn't block Planetside2.
      My Computer


  9. DQL
    Posts : 10
    Windows 10
    Thread Starter
       #9

    It is also why I asked how often Microsoft updates user activity. As near as I can tell, it isn't very often.
      My Computer


  10. Posts : 17,661
    Windows 10 Pro
       #10

    DQL said:
    Does it still create activity reports if it is a local account?

    In order to block a program, they need to run the program, and I need to see it in the activity report. So if the local account doesn't create activity reports then blocking programs is effectively disabled. This is why my son made the change - so I couldn't block Planetside2.
    DQL said:
    It is also why I asked how often Microsoft updates user activity. As near as I can tell, it isn't very often.
    I will check something on a test machine, will post when done. I have an idea which in theory should work, I need to test it first to be sure.

    Might take an hour or two, need to install Windows 10 first on that machine.
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 09:50.
Find Us




Windows 10 Forums