Managing Windows User Accounts with net user Command
Published: February 22, 2023 | Last Modified: May 13, 2025
Tags: net windows user management security command line system administration account management password management group management
Categories: Shell Windows System Administration
The “net user” command is a Command Prompt (Shell) command used to manage user accounts on a Windows operating system. It can be used to create, modify, or delete user accounts, as well as to change passwords and manage group memberships.
Syntax
net user [username [password | *] [options]] [/DOMAIN]
net user username {password | *} /ADD [options] [/DOMAIN]
net user username [/DELETE] [/DOMAIN]
net user username [/TIMES:{times | ALL}]
net user username [/ACTIVE: {YES | NO}]
Add a user
To add a new user account:
net user USERNAME PASSWORD /add
Delete a user
To delete a user account:
net user USERNAME /delete
Add user to group
To add a user to a specific group:
Local
net localgroup GROUPNAME USERNAME /add
Domain
net localgroup GROUPNAME DOMAIN\USERNAME /add
Remove user from group
To remove a user from a specific group:
Domain
net localgroup GROUPNAME DOMAIN\USERNAME /delete
Local
net localgroup GROUPNAME USERNAME /delete
Reset password
To reset a password:
Domain
net user USERNAME PASSWORD /domain /active:Yes
Local
net user USERNAME PASSWORD
Set password to be changed upon sign-in
To set a password for a user that must be changed upon sign-in:
Domain
net user USERNAME PASSWORD /domain /logonpasswordchg:yes
Local
net user USERNAME PASSWORD /logonpasswordchg:yes
Unlock account
To unlock an account:
Domain
net user USERNAME /domain /active:yes
Local
net user USERNAME /active:yes
Lock an account
To lock an account:
Domain
net user USERNAME /domain /active:no
Local
net user USERNAME /active:no
Check if account is active
To check if an account is active:
The find
command is case-sensitive:
net user USERNAME | find "Account active"
Set logon times
To set the logon times for a user:
net user USERNAME /times:{times | ALL}
times
: Specifies the times that users are allowed to use the computer. The time is specified as day[-day][,day[-day]],time[-time][,time[-time]], limited to 1-hour increments.
Options
username
: Name of the user account to add, delete, modify, or view.password
: Assigns or changes a password for the user account.*
: Produces a prompt for the password. The password is not displayed when you type it at a password prompt./DOMAIN
: Performs the operation on the primary domain controller of the current domain./ADD
: Adds a user account to the user accounts database./DELETE
: Removes a user account from the user accounts database./TIMES:{times | ALL}
: Specifies the logon hours./ACTIVE:{YES | NO}
: Activates or deactivates the user account.
This comprehensive guide provides detailed examples for various operations using the net user
command. By understanding these commands, you can effectively manage user accounts on a Windows operating system.