How to Audit User Accounts on Your Windows PC
Find every account on the PC and confirm each one is meant to be there.
5 min read · Beginner friendly
Step 1: Use Settings
Settings → Accounts → Other users shows accounts other than your own.
Click each one and note the type — Administrator or Standard User.
Settings hides some built-in accounts. Use steps 2–3 for a complete list.
Step 2: Use Local Users and Groups
Press Win + R, type lusrmgr.msc and press Enter. (Windows Home users will need to use step 3 instead.)
Click Users to see every local account, including hidden ones like DefaultAccount and WDAGUtilityAccount, which are normal.
Click Groups → Administrators to see exactly who has admin rights.
Step 3: Use Command Prompt (works on every edition)
Press Win, type cmd, right-click → Run as administrator.
Type net user and press Enter — that lists every account.
Type net localgroup administrators — that shows only admins.
Step 4: Look for red flags
Names you do not recognise, or close-but-not-quite copies of your name (e.g. Admin1, UserService, your name with an extra letter).
Accounts in the Administrators group that you did not create.
Accounts created in the last 30 days you cannot explain.
Built-in accounts that are normal: Administrator (disabled by default), Guest (disabled), DefaultAccount, WDAGUtilityAccount. Anything else is yours to verify.