How to Audit User Accounts, Disable Guest, and Remove Old Users

What Causes This?

Windows PCs often collect extra user accounts over time: old employee logins, test accounts, family profiles, or leftover accounts from setup and repair work. These stale accounts can become security risks if they still have passwords, admin rights, or access to shared files. The built-in Guest account is another common weak point, because it can provide an extra sign-in path you may not actually need.

Common Symptoms

• You see user accounts on the sign-in screen that nobody uses anymore
• An old account still has administrator access
• The Guest account appears as enabled in account settings
• Shared files, folders, or apps are accessible to former users
• You are not sure which accounts on the PC are still active or safe to keep

How to Fix It Manually

1. Review all local user accounts

   • Press Windows + R, type netplwiz, then press Enter.
   • In the User Accounts window, review the list of accounts on the PC.
   • Look for accounts you do not recognize, old profiles, or users who no longer need access.

2. Check whether the Guest account is enabled

   • Press Windows + X and choose Computer Management.
   • In the left pane, go to System Tools > Local Users and Groups > Users.
   • If you do not see Local Users and Groups, your Windows edition may not include it. In that case, use the next steps in Settings and Command Prompt.
   • In the Users list, double-click Guest.
   • Make sure Account is disabled is checked, then click Apply and OK.

3. Remove old user accounts from Settings

   • Open Settings with Windows + I.
   • Go to Accounts > Family & other users or Accounts > Other users, depending on your Windows version.
   • Select an unused account and click Remove.
   • Confirm by choosing Delete account and data only if you are sure you no longer need that user’s files.
   • If you want to keep the files, back them up first from C:\Users\OldUsername.

4. Verify administrator access

   • Open Settings > Accounts > Family & other users.
   • Click each remaining account and check whether it is a Standard User or Administrator.
   • Remove admin rights from any account that does not need them.
   • Keep at least one trusted administrator account so you do not lock yourself out of system changes.

5. Use Command Prompt to confirm the account list

   • Press Windows, type cmd, then choose Run as administrator.
   • Type net user and press Enter.
   • Review the full list of local accounts.
   • To disable Guest directly, run: net user guest /active:no
   • To remove an old local account, run: net user OldUsername /delete

6. Restart and confirm the cleanup

   • Restart the PC.
   • Check the sign-in screen and confirm old accounts no longer appear.
   • Sign in with a valid account and make sure your normal access still works.
   • If the PC is shared, confirm the remaining users can still access only what they need.

Fix It Automatically with Kudu

Kudu can scan your PC for risky account settings, flag stale or unnecessary user accounts, and help you spot whether Guest access or other weak account configurations are still enabled. It gives you a faster way to review account security without digging through multiple Windows menus and command-line tools.

Download Kudu Free →