How to Set Up Parental Controls on Windows 11

Windows 11 has two practical routes. The free built-in route is Microsoft Family Safety: it needs a Microsoft account for the parent and the child, and it covers screen time, app limits and web filtering in Microsoft Edge. The local route is a Standard Windows account plus a separate time-limit app and a DNS filter; it needs no Microsoft account and can cover every browser, but you set it up by hand. Most families are best served by starting with the account, adding a time limit, and then choosing a filter.

This page is the starting point for the whole setup. Each section links to a detailed guide, so you can stop reading here once you know which route fits your family.

Step 0: choose the account model first

Every other control depends on this choice. A child with an administrator account can undo almost anything: edit the hosts file, change DNS, install a VPN or create a new account. Whatever route you pick, the child must be a Standard user.

You can combine them: Family Safety for time and app limits, plus a DNS filter for browser-wide blocking.

Route A: Microsoft Family Safety, step by step

This is the free built-in option. It is the right first choice if your child can use a Microsoft account and mostly uses Edge.

1. Create the family group. Sign in at account.microsoft.com/family with the parent's Microsoft account, choose “Add a family member” and create a child account. Detailed family account guide →
2. Sign in on the child's PC. Add the child's Microsoft account to Windows 11. Keep it a Standard user, not an administrator. Child account guide →
3. Set screen time. In Family Safety open Screen time, turn on the limit and set a daily allowance and a weekly schedule. Screen time guide →
4. Set app and game limits. Open Apps and games and limit the apps that should not run all day. This is how you handle Roblox or Minecraft without blocking the whole PC. Blocking games guide →
5. Turn on web filtering. Open Content filters → Web and search, turn filtering on and add sites to the blocked list. Remember: this filters fully only in Edge. Website blocking guide →
6. Test as the child. Sign in as the child, open Edge, try a blocked site and wait for a limit to expire. Testing now saves a confusing conversation later.

Route B: a local account without a Microsoft account

Use this route if you do not want a Microsoft cloud account for the child, or if the PC is shared and each child has a local profile.

1. Create a local Standard account for the child. Settings → Accounts → Other users → Add account → “I don't have this person's sign-in information” → “Add a user without a Microsoft account”. Then set the account type to Standard.
2. Keep a separate administrator account for the parent. Do not use the child's account for installs or settings changes.
3. Add a time-limit app. Windows 11 has no built-in per-user time limit outside Family Safety. A local time-limit app such as ScreenRhythm provides a daily limit, breaks, a weekly schedule and a screen lock. Full no-account guide →
4. Add browser-wide filtering. Use a DNS filter with a family category, or the hosts file for named domains. This is the layer that covers Chrome, Firefox and Edge. Blocking methods compared →
5. Decide about games separately. A website block does not stop an installed game. Use app limits, a Standard account or a firewall rule. Game blocking guide →

Microsoft parental controls: what you get for free

Microsoft’s parental controls are called Microsoft Family Safety. They are free with a Microsoft account and cover four things: screen time, app and game limits, web and search filtering, and activity reports. The account model is the limitation: the child needs a Microsoft account, and a purely local Windows account is not managed by Family Safety.

It is the right first choice if your family already uses Microsoft accounts and the child uses Microsoft Edge. It is weaker if you use a local account, if the child uses Chrome or Firefox, or if you need a filter in every browser. Full comparison →

Parental controls on Windows 10

The same two routes work on Windows 10. Family Safety supports Windows 10 and Windows 11; the Settings screens differ slightly, but the account model is the same. A local Standard account plus a time-limit app and a DNS filter also works on Windows 10, and the browser limitations are the same: Family Safety filters fully only in Edge.

Screen time guide (Windows 11) → · local-account setup →

Parental controls for a laptop

A laptop follows the same rules as a desktop, with one practical difference: it leaves the house. A router DNS filter only protects it at home; the hosts file, Family Safety and a system-wide app filter travel with the device. If several children share the laptop, give each one a separate Windows account, or use a PC-wide time limit if separate accounts are impractical.

Shared family laptop guide →

What to set first, and why

The order matters more than the number of settings. A common mistake is to block twenty sites on day one and never set a time limit; the child then moves to another site or another device.

1. The account. Standard user for the child, separate administrator for the parent.
2. A daily time limit. This is the control that survives new sites, new games and new apps.
3. A weekly schedule. School nights, homework time and bedtime are easier to enforce as a schedule than as a daily argument.
4. Web filtering. Add categories first, specific sites second.
5. App and game limits. Only for the apps that actually cause trouble.
6. A written agreement. Put the same rules on paper so the child knows what happens and when. Free agreement generator →

What each control actually covers

Common problems

• “The limit does not apply.” The child is probably signed in with a different account, or is an administrator. Check the account first, then sync. Seven fixes for Family Safety →
• “The block works in Edge but not Chrome.” That is expected. Family Safety filters fully only in Edge; add a DNS filter or a system-wide app filter for other browsers.
• “The schedule is off by an hour.” Check the time zone on the child's PC and on the family account.
• “The child installed a VPN.” Block VPN apps and keep the child on a Standard account. No filter survives an administrator with a VPN.
• “We share one PC.” Give each child a separate Windows account, or use a PC-wide time limit if separate accounts are impractical. Shared laptop guide →

Talk about it before you switch it on

Parental controls work better as a visible agreement than as a surprise. Explain what is limited, why, and when it will be reviewed. A short written agreement makes the rule concrete and gives the child a way to ask for changes instead of looking for a workaround.

Three printable agreement templates → · make your own in the browser →

Questions

ScreenRhythm is our product. We describe Microsoft Family Safety and the built-in Windows options honestly, including their limits. No control replaces parental supervision.