Page 1 of 3 123 LastLast
  1.    01 Feb 2016 #1
    Join Date : Feb 2016
    Posts : 10
    Windows 10

    Bypass Family Settings by conversion to Local Account


    I just upgraded all my computers to Windows 10.

    My 15 year old is clever enough to bypass the (new) Family settings controlled Microsoft Account I just set up for him by converting the account to a local account. This seems to let him play as long as he wants, without time restrictions. I didn't get an email about this, or any other notification. This is the second time he has done it.

    Why is it so easy to completely bypass all the family safety settings it took me hours(!) to finally get set up?

    Also the Family Recent Activity shown on my Microsoft Account web site doesn't seem to update itself. It is at least two or three days behind, perhaps more. How often does Recent Activity update? Is it supposed to be near instantaneous?
      My ComputerSystem Spec
  2.    01 Feb 2016 #2
    Join Date : Oct 2013
    A Finnish expat in Germany
    Posts : 13,096
    Windows 10 Pro

    What you describe should be impossible. To test this I just now created a child account on my PC and signing in to it tried to change it to either an admin account or a local account. Could not do that.

    The only way your son can change his account to a local account and "remove" it from Family, or create a new account is to have access to an admin account on that same PC (your account), or alternatively access to your admin MS account's Family settings online. For that he needs both your MS account username and password. It means that if you protect your own personal admin account (MS account) with a strong password and especially the Two-Step Verification, he has no way to access that account and he should not be able / is not able to change your Family settings or his account status.

    Kari
      My ComputerSystem Spec
  3.    01 Feb 2016 #3
    Join Date : Feb 2016
    Posts : 10
    Windows 10
    Thread Starter

    This is Windows 10 - when I create new local accounts, I only see "admin" or "standard" type of accounts. What do you mean when you say "child" account?

    I upgraded the PC from Windows 7 (that had local family control features that, while limited, at least functioned as advertised). So all the accounts came from that upgrade.

    The account in question was a standard local account, that I converted to a "Microsoft account" for a child, because that is the only way in Windows 10 to get family settings controls. I see it in my Family settings online, and can (apparently) control screen time, etc. When I log in to it on the computer and go to Settings, I also see I have the ability there to return it to a local account.

    All of this without any access to my admin account at all. I can take a video of the entire process from start to finish, here if you need convincing. It would probably be about a 45 minute video, what with all the confirmation codes, creating garbage emails just for Microsoft, etc.

    Also, please answer my other question regarding the rate of updates to family settings "recent activity". Is it once a day, once a week, whenever the activity report is emailed???

    Thanks for looking into this. I would appreciate it if you would not dismiss it as user error.
      My ComputerSystem Spec
  4.    01 Feb 2016 #4
    Join Date : Oct 2013
    A Finnish expat in Germany
    Posts : 13,096
    Windows 10 Pro

    Quote Originally Posted by DQL View Post
    This is Windows 10 - when I create new local accounts, I only see "admin" or "standard" type of accounts. What do you mean when you say "child" account?
    I assumed that you had created a child (family) account, not creating a local normal account then converting it.

    In your case I would simply copy his personal stuff to an external backup drive, remove his account and start from scratch. Takes a few minutes but in doing so you get better control.

    When you have removed his account, this is Phase 1 in recreating a controlled child account to him: Child Account - Add or Remove from Your Family in Windows 10 - Windows 10 Forums. When done, restore his personal content to respective folders under his user profile folder.

    Doing this he has no way to switch to a local account.

    Then, the more you have patience to read, the more practical tips you will get:


    Kari
    Last edited by Kari; 01 Feb 2016 at 15:49. Reason: Fixed some of the worst typos.
      My ComputerSystem Spec
  5.    02 Feb 2016 #5
    Join Date : Feb 2016
    Posts : 10
    Windows 10
    Thread Starter

    Thanks Kari.

    I copied their User folders so I could restore them later.
    I deleted their accounts on the computer.
    I removed them from my Microsoft Account "Family" online, to "start from scratch".
    I went to "Settings" on my PC and added them as a child account.
    I logged into their email and accepted the Family request.
    I then logged into their new child account. Before restoring their User folders.

    Guess what? They can still log in with a local account.

    This "local account" option that lets them bypass child controls so easily seems to be sticky. As if it is stored with the Microsoft Account. That I needed to create in Windows10. To enable child settings control.

    I guess nobody at Microsoft thought of the use-case of somebody upgrading from Windows7 to Windows10 with EXISTING child accounts.

    What would you suggest now? Create NEW, DIFFERENT Microsoft accounts using other garbage emails?
      My ComputerSystem Spec
  6.    02 Feb 2016 #6
    Join Date : Feb 2016
    Posts : 10
    Windows 10
    Thread Starter

    If it matters, there is another computer downstairs on which they also have Microsoft accounts.
      My ComputerSystem Spec
  7.    02 Feb 2016 #7
    Join Date : Oct 2013
    A Finnish expat in Germany
    Posts : 13,096
    Windows 10 Pro

    Quote Originally Posted by DQL View Post
    Guess what? They can still log in with a local account.
    Not personally using Family accounts (multiple time divorced, no kids ) I had to ask an expert's opinion in this. Here's what he answered, direct quote from a message:

    A child account will be able to switch to a local account, but the Family icon will still show in the notification area, and Family restrictions will still be enforced.
    Note: the above in situation where the Child account is created "by the book", not converting a local account to an MS account first.
      My ComputerSystem Spec
  8.    02 Feb 2016 #8
    Join Date : Feb 2016
    Posts : 10
    Windows 10
    Thread Starter

    Does it still create activity reports if it is a local account?

    In order to block a program, they need to run the program, and I need to see it in the activity report. So if the local account doesn't create activity reports then blocking programs is effectively disabled. This is why my son made the change - so I couldn't block Planetside2.
      My ComputerSystem Spec
  9.    02 Feb 2016 #9
    Join Date : Feb 2016
    Posts : 10
    Windows 10
    Thread Starter

    It is also why I asked how often Microsoft updates user activity. As near as I can tell, it isn't very often.
      My ComputerSystem Spec
  10.    02 Feb 2016 #10
    Join Date : Oct 2013
    A Finnish expat in Germany
    Posts : 13,096
    Windows 10 Pro

    Quote Originally Posted by DQL View Post
    Does it still create activity reports if it is a local account?

    In order to block a program, they need to run the program, and I need to see it in the activity report. So if the local account doesn't create activity reports then blocking programs is effectively disabled. This is why my son made the change - so I couldn't block Planetside2.
    Quote Originally Posted by DQL View Post
    It is also why I asked how often Microsoft updates user activity. As near as I can tell, it isn't very often.
    I will check something on a test machine, will post when done. I have an idea which in theory should work, I need to test it first to be sure.

    Might take an hour or two, need to install Windows 10 first on that machine.
      My ComputerSystem Spec

 
Page 1 of 3 123 LastLast


Similar Threads
Thread Forum
Solved Adding Family Account
Hi all I recently completed the upgrade from Windows 7 to 10 but found I could not log onto a family account I had made for my grandson. I eventually decided to delete the account and create a new one. I successfully deleted the account but now...
User Accounts and Family Safety
Local account login changed to Microsoft Account so unable to log in
I would like help solving a mystery. I set up a new Dell Optiplex 3020 which shipped with Windows 10 Pro. I bypassed the option to set up the user with a Microsoft Account (The owner does not have a microsoft account and I did not create one at...
User Accounts and Family Safety
Creation of a local account as a family member
Hi How do I create a local account, as a family member? Thanks Bye
User Accounts and Family Safety
Solved Local account changed to MS account, act as separate accounts at login
So I originally started with a local account but then signed into the store with a MS account. I changed the setting where users are required to enter a password through netplwiz (like this) and making a password not required after waking from...
User Accounts and Family Safety
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 14:29.
Find Us
Twitter Facebook Google+ Ten Forums iOS App Ten Forums Android App



Windows 10 Forums