Disabling security questions in Windows 10 pro












25















Windows 10 v 1803 upon installation, selecting an offline account, asks for 3 "recovery questions", and related recovery answers. Answers to these questions are trivially accessible from any social network, and using it as "alternative passwords" adds no value to me.



How can I disable this entire feature?










share|improve this question

























  • No, that cannot be skipped or disabled.

    – Waka
    May 2 '18 at 6:56


















25















Windows 10 v 1803 upon installation, selecting an offline account, asks for 3 "recovery questions", and related recovery answers. Answers to these questions are trivially accessible from any social network, and using it as "alternative passwords" adds no value to me.



How can I disable this entire feature?










share|improve this question

























  • No, that cannot be skipped or disabled.

    – Waka
    May 2 '18 at 6:56
















25












25








25


3






Windows 10 v 1803 upon installation, selecting an offline account, asks for 3 "recovery questions", and related recovery answers. Answers to these questions are trivially accessible from any social network, and using it as "alternative passwords" adds no value to me.



How can I disable this entire feature?










share|improve this question
















Windows 10 v 1803 upon installation, selecting an offline account, asks for 3 "recovery questions", and related recovery answers. Answers to these questions are trivially accessible from any social network, and using it as "alternative passwords" adds no value to me.



How can I disable this entire feature?







windows windows-10 windows-10-v1803






share|improve this question















share|improve this question













share|improve this question




share|improve this question








edited May 3 '18 at 19:52









magicandre1981

81.6k20126204




81.6k20126204










asked May 2 '18 at 6:05









Silver DragonSilver Dragon

3552416




3552416













  • No, that cannot be skipped or disabled.

    – Waka
    May 2 '18 at 6:56





















  • No, that cannot be skipped or disabled.

    – Waka
    May 2 '18 at 6:56



















No, that cannot be skipped or disabled.

– Waka
May 2 '18 at 6:56







No, that cannot be skipped or disabled.

– Waka
May 2 '18 at 6:56












5 Answers
5






active

oldest

votes


















23














Instead of setting the password during the OOBE wizard, set it later. This hasn’t changed from earlier versions of Windows where you had to enter a password hint.



After the setup process is complete, press Ctrl+Alt+Del and select “Change a password”. You will be prompted to enter your old password (empty) and your new password.



If you already entered security questions, you’ll probably have to remove your password first and then use the Ctrl+Alt+Del method. Depending on the how you remove the password, you may lose access to EFS-encrypted files.



Like the password hint on earlier Windows versions, this probably cannot be deactivated on non-domain accounts.






share|improve this answer

































    2














    Its not needed that you answer those questions correctly. You can put any answer there or just some values that you are sure that no one else knows.



    That way, you have a recovery option and still have acceptable security for your login.






    share|improve this answer































      1














      You can create users without security questions by going into the "Local Users and Groups" panel within Computer Management. In there you have the option to create users with or without a password along with the settings like "change password on next login", or "set password to never expire". There is no place in there to setup a hint or security questions.



      Note that by default account created there are only members of the users group and if you want them to be local admins, then you need to add "administrators" to their group.






      share|improve this answer































        -1














        Starting with Windows 10 build 18237, a new group policy was added for preventing the use of security questions for local accounts. Open Local Group Policy Editor and go to:



        Computer ConfigurationAdministrative TemplatesWindows ComponentsCredential User Interface



        Prevent the use of security questions for local accounts



        Look for a policy called "Prevent the use of security questions for local accounts" and enable it. Source



        If you want to delete the security questions that was already set up for local account, open Registry Editor and go to: HKEY_LOCAL_MACHINESECURITYPolicySecrets. Delete any subkey that names with L$SQSA. Source



        Remove security questions for Windows 10 local account






        share|improve this answer































          -1














          "Upon installation" (which I took to mean during the obligatory setup process you are forced to use when you first power up a new PC) I've found those questions to be unavoidable ONLY IF you skip setting a password for the user you are being forced to create.



          It's my practice to setup a local administrator on each new machine even if it is joining a domain so I don't mind entering the user name and description etc., but the only way I can find to avoid those security questions is to leave the password field blank. Later on, once the obligatory setup process has finished, don't forget to add a password to that account because it is by default a local administrator account. When I do this using netplwiz I'm not asked to create any security questions.






          share|improve this answer






















            protected by Ramhound Jan 22 at 4:11



            Thank you for your interest in this question.
            Because it has attracted low-quality or spam answers that had to be removed, posting an answer now requires 10 reputation on this site (the association bonus does not count).



            Would you like to answer one of these unanswered questions instead?














            5 Answers
            5






            active

            oldest

            votes








            5 Answers
            5






            active

            oldest

            votes









            active

            oldest

            votes






            active

            oldest

            votes









            23














            Instead of setting the password during the OOBE wizard, set it later. This hasn’t changed from earlier versions of Windows where you had to enter a password hint.



            After the setup process is complete, press Ctrl+Alt+Del and select “Change a password”. You will be prompted to enter your old password (empty) and your new password.



            If you already entered security questions, you’ll probably have to remove your password first and then use the Ctrl+Alt+Del method. Depending on the how you remove the password, you may lose access to EFS-encrypted files.



            Like the password hint on earlier Windows versions, this probably cannot be deactivated on non-domain accounts.






            share|improve this answer






























              23














              Instead of setting the password during the OOBE wizard, set it later. This hasn’t changed from earlier versions of Windows where you had to enter a password hint.



              After the setup process is complete, press Ctrl+Alt+Del and select “Change a password”. You will be prompted to enter your old password (empty) and your new password.



              If you already entered security questions, you’ll probably have to remove your password first and then use the Ctrl+Alt+Del method. Depending on the how you remove the password, you may lose access to EFS-encrypted files.



              Like the password hint on earlier Windows versions, this probably cannot be deactivated on non-domain accounts.






              share|improve this answer




























                23












                23








                23







                Instead of setting the password during the OOBE wizard, set it later. This hasn’t changed from earlier versions of Windows where you had to enter a password hint.



                After the setup process is complete, press Ctrl+Alt+Del and select “Change a password”. You will be prompted to enter your old password (empty) and your new password.



                If you already entered security questions, you’ll probably have to remove your password first and then use the Ctrl+Alt+Del method. Depending on the how you remove the password, you may lose access to EFS-encrypted files.



                Like the password hint on earlier Windows versions, this probably cannot be deactivated on non-domain accounts.






                share|improve this answer















                Instead of setting the password during the OOBE wizard, set it later. This hasn’t changed from earlier versions of Windows where you had to enter a password hint.



                After the setup process is complete, press Ctrl+Alt+Del and select “Change a password”. You will be prompted to enter your old password (empty) and your new password.



                If you already entered security questions, you’ll probably have to remove your password first and then use the Ctrl+Alt+Del method. Depending on the how you remove the password, you may lose access to EFS-encrypted files.



                Like the password hint on earlier Windows versions, this probably cannot be deactivated on non-domain accounts.







                share|improve this answer














                share|improve this answer



                share|improve this answer








                edited May 3 '18 at 4:58

























                answered May 2 '18 at 9:04









                Daniel BDaniel B

                33.9k76387




                33.9k76387

























                    2














                    Its not needed that you answer those questions correctly. You can put any answer there or just some values that you are sure that no one else knows.



                    That way, you have a recovery option and still have acceptable security for your login.






                    share|improve this answer




























                      2














                      Its not needed that you answer those questions correctly. You can put any answer there or just some values that you are sure that no one else knows.



                      That way, you have a recovery option and still have acceptable security for your login.






                      share|improve this answer


























                        2












                        2








                        2







                        Its not needed that you answer those questions correctly. You can put any answer there or just some values that you are sure that no one else knows.



                        That way, you have a recovery option and still have acceptable security for your login.






                        share|improve this answer













                        Its not needed that you answer those questions correctly. You can put any answer there or just some values that you are sure that no one else knows.



                        That way, you have a recovery option and still have acceptable security for your login.







                        share|improve this answer












                        share|improve this answer



                        share|improve this answer










                        answered May 2 '18 at 6:39









                        Ganesh R.Ganesh R.

                        4,79112027




                        4,79112027























                            1














                            You can create users without security questions by going into the "Local Users and Groups" panel within Computer Management. In there you have the option to create users with or without a password along with the settings like "change password on next login", or "set password to never expire". There is no place in there to setup a hint or security questions.



                            Note that by default account created there are only members of the users group and if you want them to be local admins, then you need to add "administrators" to their group.






                            share|improve this answer




























                              1














                              You can create users without security questions by going into the "Local Users and Groups" panel within Computer Management. In there you have the option to create users with or without a password along with the settings like "change password on next login", or "set password to never expire". There is no place in there to setup a hint or security questions.



                              Note that by default account created there are only members of the users group and if you want them to be local admins, then you need to add "administrators" to their group.






                              share|improve this answer


























                                1












                                1








                                1







                                You can create users without security questions by going into the "Local Users and Groups" panel within Computer Management. In there you have the option to create users with or without a password along with the settings like "change password on next login", or "set password to never expire". There is no place in there to setup a hint or security questions.



                                Note that by default account created there are only members of the users group and if you want them to be local admins, then you need to add "administrators" to their group.






                                share|improve this answer













                                You can create users without security questions by going into the "Local Users and Groups" panel within Computer Management. In there you have the option to create users with or without a password along with the settings like "change password on next login", or "set password to never expire". There is no place in there to setup a hint or security questions.



                                Note that by default account created there are only members of the users group and if you want them to be local admins, then you need to add "administrators" to their group.







                                share|improve this answer












                                share|improve this answer



                                share|improve this answer










                                answered Jul 11 '18 at 4:20









                                ZenonkZenonk

                                264




                                264























                                    -1














                                    Starting with Windows 10 build 18237, a new group policy was added for preventing the use of security questions for local accounts. Open Local Group Policy Editor and go to:



                                    Computer ConfigurationAdministrative TemplatesWindows ComponentsCredential User Interface



                                    Prevent the use of security questions for local accounts



                                    Look for a policy called "Prevent the use of security questions for local accounts" and enable it. Source



                                    If you want to delete the security questions that was already set up for local account, open Registry Editor and go to: HKEY_LOCAL_MACHINESECURITYPolicySecrets. Delete any subkey that names with L$SQSA. Source



                                    Remove security questions for Windows 10 local account






                                    share|improve this answer




























                                      -1














                                      Starting with Windows 10 build 18237, a new group policy was added for preventing the use of security questions for local accounts. Open Local Group Policy Editor and go to:



                                      Computer ConfigurationAdministrative TemplatesWindows ComponentsCredential User Interface



                                      Prevent the use of security questions for local accounts



                                      Look for a policy called "Prevent the use of security questions for local accounts" and enable it. Source



                                      If you want to delete the security questions that was already set up for local account, open Registry Editor and go to: HKEY_LOCAL_MACHINESECURITYPolicySecrets. Delete any subkey that names with L$SQSA. Source



                                      Remove security questions for Windows 10 local account






                                      share|improve this answer


























                                        -1












                                        -1








                                        -1







                                        Starting with Windows 10 build 18237, a new group policy was added for preventing the use of security questions for local accounts. Open Local Group Policy Editor and go to:



                                        Computer ConfigurationAdministrative TemplatesWindows ComponentsCredential User Interface



                                        Prevent the use of security questions for local accounts



                                        Look for a policy called "Prevent the use of security questions for local accounts" and enable it. Source



                                        If you want to delete the security questions that was already set up for local account, open Registry Editor and go to: HKEY_LOCAL_MACHINESECURITYPolicySecrets. Delete any subkey that names with L$SQSA. Source



                                        Remove security questions for Windows 10 local account






                                        share|improve this answer













                                        Starting with Windows 10 build 18237, a new group policy was added for preventing the use of security questions for local accounts. Open Local Group Policy Editor and go to:



                                        Computer ConfigurationAdministrative TemplatesWindows ComponentsCredential User Interface



                                        Prevent the use of security questions for local accounts



                                        Look for a policy called "Prevent the use of security questions for local accounts" and enable it. Source



                                        If you want to delete the security questions that was already set up for local account, open Registry Editor and go to: HKEY_LOCAL_MACHINESECURITYPolicySecrets. Delete any subkey that names with L$SQSA. Source



                                        Remove security questions for Windows 10 local account







                                        share|improve this answer












                                        share|improve this answer



                                        share|improve this answer










                                        answered Dec 17 '18 at 7:47









                                        E.SwaffE.Swaff

                                        112




                                        112























                                            -1














                                            "Upon installation" (which I took to mean during the obligatory setup process you are forced to use when you first power up a new PC) I've found those questions to be unavoidable ONLY IF you skip setting a password for the user you are being forced to create.



                                            It's my practice to setup a local administrator on each new machine even if it is joining a domain so I don't mind entering the user name and description etc., but the only way I can find to avoid those security questions is to leave the password field blank. Later on, once the obligatory setup process has finished, don't forget to add a password to that account because it is by default a local administrator account. When I do this using netplwiz I'm not asked to create any security questions.






                                            share|improve this answer




























                                              -1














                                              "Upon installation" (which I took to mean during the obligatory setup process you are forced to use when you first power up a new PC) I've found those questions to be unavoidable ONLY IF you skip setting a password for the user you are being forced to create.



                                              It's my practice to setup a local administrator on each new machine even if it is joining a domain so I don't mind entering the user name and description etc., but the only way I can find to avoid those security questions is to leave the password field blank. Later on, once the obligatory setup process has finished, don't forget to add a password to that account because it is by default a local administrator account. When I do this using netplwiz I'm not asked to create any security questions.






                                              share|improve this answer


























                                                -1












                                                -1








                                                -1







                                                "Upon installation" (which I took to mean during the obligatory setup process you are forced to use when you first power up a new PC) I've found those questions to be unavoidable ONLY IF you skip setting a password for the user you are being forced to create.



                                                It's my practice to setup a local administrator on each new machine even if it is joining a domain so I don't mind entering the user name and description etc., but the only way I can find to avoid those security questions is to leave the password field blank. Later on, once the obligatory setup process has finished, don't forget to add a password to that account because it is by default a local administrator account. When I do this using netplwiz I'm not asked to create any security questions.






                                                share|improve this answer













                                                "Upon installation" (which I took to mean during the obligatory setup process you are forced to use when you first power up a new PC) I've found those questions to be unavoidable ONLY IF you skip setting a password for the user you are being forced to create.



                                                It's my practice to setup a local administrator on each new machine even if it is joining a domain so I don't mind entering the user name and description etc., but the only way I can find to avoid those security questions is to leave the password field blank. Later on, once the obligatory setup process has finished, don't forget to add a password to that account because it is by default a local administrator account. When I do this using netplwiz I'm not asked to create any security questions.







                                                share|improve this answer












                                                share|improve this answer



                                                share|improve this answer










                                                answered Jan 22 at 1:52









                                                BungeecorkBungeecork

                                                1




                                                1

















                                                    protected by Ramhound Jan 22 at 4:11



                                                    Thank you for your interest in this question.
                                                    Because it has attracted low-quality or spam answers that had to be removed, posting an answer now requires 10 reputation on this site (the association bonus does not count).



                                                    Would you like to answer one of these unanswered questions instead?



                                                    Popular posts from this blog

                                                    How to make a Squid Proxy server?

                                                    Is this a new Fibonacci Identity?

                                                    19世紀