k_passwd

Context: kids and wife need their individual accounts on my win10 laptop

Q: what if wife grants access next day without me knowing? Basically I don’t trust her judgement
A: I will change the password frequently

— warning : don’t use a private password (or recovery question) as it will be disclosed to wife or kids
— I usually have root and root2 accounts “just in case”, esp. for computers shared with kids.
Warning — Each root account should use a very different password that’s easy for my  recall but not same scheme like se+1, se+2, se+3. If you can’t recall any of these passwords, you could get locked out.

— account lockout.. secpol.msc >> Account Policies >> Account Lockout Policy

• “Account lockout duration” to 1 minute
• AcctLockoutThreshold .. 999 is a better version of zero.. https://docs.microsoft.com/en-us/services-hub/health/remediation-steps-ad/set-the-account-lockout-threshold-to-the-recommended-value says zero prevents lockout
• apparently not 100% reliable, so I wanted to be more lenient.