User accounts and permissions

Use a standard account for daily work and a separate administrator account for installs and settings, so accidental or malicious changes are limited. Add a user under Settings → Accounts → Other users and choose its type. On Windows Pro and Enterprise, lusrmgr.msc gives finer control over local users and groups. Give every employee their own account instead of sharing one.