Direct answer
List local accounts and their purpose, compare enabled status with the device policy, and investigate unowned or obsolete entries with the system owner before any removal.
Gather a scoped inventory
On an authorized device, record account names or restricted identifiers, enabled status, type and business owner. Include service and emergency accounts in the review without exposing passwords. Microsoft describes the built-in and other local account categories.
Reference: Microsoft: Local accounts.
Check expected use
Match accounts with device management, support procedures and application dependencies. A disabled account, a stale record and an unknown account are different findings. Review group privileges separately because account presence alone does not establish administrative access.
Change safely
Confirm the owner's approval, dependencies and a tested recovery route before disabling an obsolete account. Retest application and support access using authorized identities. Record exceptions and schedule a review after staff changes or device repurposing.
Resolve a stale support account
If a named local support account has no current owner, compare it with the support roster and application dependencies. Identify an alternative administrative recovery path and obtain the owner's approval before disabling it. Retest the remaining support workflow and record any systems that were offline during the change.
Assessment limits
Local accounts are only one source of device access. Directory accounts, groups, remote management and available permissions require separate review.
Frequently asked questions
Does every local account have administrator rights?
No. Review its group memberships and effective privileges separately.
Should unknown accounts be deleted immediately?
Investigate ownership and dependencies first and preserve a verified recovery path.
Does a local account inventory list directory users?
No. Directory and delegated access are separate sources of identity and privilege.
Primary sources and further reading
These guides combine published security guidance with practical assessment planning. Adapt checks to the owner's policy, environment, and authorized scope.
This guide was prepared with AI assistance using the linked sources and illustrative examples. Check current vendor guidance and your environment before making changes.