How to block other users (same domain users) login my system, I want to do this setting in my system locally

To block other users from logging into your system locally, you can use the following methods:

Method 1: Use Local Group Policy Editor

1. Press Win + R to open the Run dialog.
2. Type gpedit.msc and press Enter to open the Local Group Policy Editor.
3. Navigate to Computer Configuration > Windows Settings > Security Settings > Local Policies > User Rights Assignment.
4. Find the policy named Deny logon locally.
5. Double-click it and select Define these policy settings.
6. Click Add User or Group, and add the users or groups you want to deny access to.
7. Apply the changes and close the editor.

Method 2: Remove Users from Local Groups

1. Right-click on This PC or My Computer and select Manage.
2. Expand Local Users and Groups > Groups.
3. Double-click on the Users group.
4. Remove any users you do not want to have access to the system.
5. Add your user account to ensure you have access.

Method 3: Disable User Accounts

If there are specific user accounts you want to disable:

1. Open Computer Management.
2. Navigate to Local Users and Groups > Users.
3. Right-click on the user account you want to disable and select Properties.
4. Check the box for Account is disabled.
5. Click OK to apply the changes.

These methods will help you restrict access to your system, ensuring that only your login can be used to access it.

References:

• How to restrict use of a computer to one domain user only
• Local Accounts

Hi Ramesh Gokamalla,

It seems to me that the root of the performance issue is the accumulation of data tied to those 15 legacy profiles. Each profile carries cached files, registry entries, and system data that consume space even if you don’t actively use them. In the case the most effective way is twofold:

Profile cleanup – Removing those unused profiles will immediately free up disk space and reduce background clutter. This is a safe operation when performed through Windows’ built‑in profile management, and it won’t affect your own account.

Account restriction – Once the profiles are gone, the accounts themselves should either be disabled or deleted. This ensures that no one else can log in locally. Since you don’t have Active Directory access, this will be handled entirely at the local machine level.

After these changes, your system will recognize only your login as valid. For added peace of mind, I recommend keeping a single administrator account (with a strong password) as a fallback, but otherwise locking down all other accounts.

Finally, once the access issue is resolved, you may want to run a system cleanup to clear residual update files and temporary data. This will give you back additional space and help stabilize performance.

I hope you find this piece of advice useful to some extent. If you're able to solve the issue based on that, it's appreciated to accept the answer as a way to share your valuable experience with the community. Have a good day!

Vivian

Hi Ramesh Gokamalla,

Have you found the answer useful? If everything is okay, it's really appreciated of you to share your experience with the issue by accepting the answer. Happy to help!

Vivian

Good morning Ramesh Gokamalla,

On a domain-joined system, domain users can still log in because authentication is handled by the domain controller, not local account management alone. With local administrator access, you can override this by configuring the local security policy to explicitly deny logon rights to domain users. Open the Local Group Policy Editor and navigate to the "Deny logon locally" policy under Computer Configuration > Windows Settings > Security Settings > Local Policies > User Rights Assignment. Add the domain users or groups you want to block, ensuring your account is excluded from this list. This policy will take precedence for local logons, preventing specified domain users from accessing your system.