This tutorial will show you how to enable or disable full access to Hyper-V for standard user accounts in Windows 10 and Windows 11.
Hyper-V enables running virtualized computer systems on top of a physical host. These virtualized systems can be used and managed just as if they were physical computer systems, however they exist in virtualized and isolated environment. Special software called a hypervisor manages access between the virtual systems and the physical hardware resources. Virtualization enables quick deployment of computer systems, a way to quickly restore systems to a previously known good state, and the ability to migrate systems between physical hosts.
Hyper-V is only available in the Windows 10/11 Enterprise, Pro, or Education editions.
When Hyper-V is enabled on the computer, only administrators have access to Hyper-V by default, but you can allow all or specific standard users access to Hyper-V.
You must be signed in as an administrator to enable or disable Hyper-V for standard users.
Contents
- Option One: Enable or Disable Hyper-V for Standard Users in Local Users and Groups Console
- Option Two: Enable or Disable Hyper-V for Standard Users in PowerShell
- Option Three: Enable or Disable Hyper-V for Standard Users in Command Prompt
EXAMPLE: Hyper-V Manager with virtual machines
1 Open Local Users and Groups (lusrmgr.msc).
2 Select Groups in the left pane, and double click/tap on Hyper-V Administrators in the middle pane. (see screenshot below)
3 Do step 4 (enable) or step 5 (disable) below for what you want.
4 Add All or Specific Standard User(s) to Enable Hyper-V for
A) Click/tap on Add. (see screenshot below)
B) Click/tap on Advanced. (see screenshot below)
C) Click/tap on Find Now, either select a specific standard user account name (ex: "Brink2") or Local account (all standard users) you want to enable Hyper-V access for, and click/tap on OK. (see screenshots below)
D) Click/tap on OK. (see screenshot below)
E) Click/tap on OK, and go to step 6. (see screenshot below)
5 Remove All or Specific Standard User(s) to Disable Hyper-V for
A) Select the specific standard user account name (ex: "Brink2") or all standard users (ex: "NT AUTHORITY\Local account (S-1-5-113)") you want to disable Hyper-V access for, and click/tap on Remove. (see screenshots below)
B) Click/tap on OK, and go to step 6. (see screenshot below)
6 When finished adding and removing standard users, you can close Local Users and Groups.
1 Open Windows Terminal (Admin), and select Windows PowerShell.
2 Copy and paste the command below into Windows Terminal (Admin), and press Enter to see a list of all standard users that currently have Hyper-V access enabled. (see screenshot below)
Get-LocalGroupMember -Group "Hyper-V Administrators"3 Copy and paste the command below you want to use into Windows Terminal (Admin), and press Enter. (see screenshots below)
(Enable Hyper-V access for all standard users)
Add-LocalGroupMember -Group "Hyper-V Administrators" -Member "NT AUTHORITY\Local account"OR
(Enable Hyper-V access for specific standard user)
Add-LocalGroupMember -Group "Hyper-V Administrators" -Member "<username>"OR
(Disable Hyper-V access for standard users group)
Remove-LocalGroupMember -Group "Hyper-V Administrators" -Member "NT AUTHORITY\Local account"OR
(Disable Hyper-V access for specific standard user)
Remove-LocalGroupMember -Group "Hyper-V Administrators" -Member "<username>"Substitute <username> in the command above with the actual user name (ex: "Brink2") of the standard user account you want to enable/disable Hyper-V access for.
1 Open Windows Terminal (Admin), and select Command Prompt.
2 Copy and paste the command below into Windows Terminal (Admin), and press Enter to see a list of all standard users that currently have Hyper-V access enabled. (see screenshot below)
net localgroup "Hyper-V Administrators"3 Copy and paste the command below you want to use into Windows Terminal (Admin), and press Enter. (see screenshots below)
(Enable Hyper-V access for all standard users)
net localgroup "Hyper-V Administrators" "NT AUTHORITY\Local account" /addOR
(Enable Hyper-V access for specific standard user)
net localgroup "Hyper-V Administrators" "<username>" /addOR
(Disable Hyper-V access for standard users group)
net localgroup "Hyper-V Administrators" "NT AUTHORITY\Local account" /deleteOR
(Disable Hyper-V access for specific standard user)
net localgroup "Hyper-V Administrators" "<username>" /deleteSubstitute <username> in the command above with the actual user name (ex: "Brink2") of the standard user account you want to enable/disable Hyper-V access for.
That's it,
Shawn Brink
Last edited:
