Accounts That Should Not Be There

Fixing accounts without the terminal

Almost all of this unit happens in one window. Settings, then Users.

Click Unlock at the top right and enter your password. Nothing on that page can be changed until you do.

Removing an account that should not exist

Any account on the machine that the ReadMe does not name is a problem, and removing it is worth points.

Settings  →  Users  →  Unlock
          →  click the account
          →  Remove User...
          →  choose  KEEP FILES

💡 Always choose Keep Files, never Delete Files. An account's home folder is whatever the system says it is, and it does not have to be that person's own folder. If someone has quietly pointed an account at a system folder, Delete Files will take that folder with it and wreck the machine. Keep Files costs you nothing and can never do that.

Demoting an administrator

If the ReadMe lists an account as a normal user but the panel shows Administrator, you do not delete the account. You change the switch:

Settings  →  Users  →  Unlock
          →  click the account
          →  Account Type:  Standard

The account stays, the person keeps working, and the extra power is gone. That is the fix the checker is looking for.

Giving an account a password

An account with no password at all is a way in. Same panel:

Settings  →  Users  →  Unlock
          →  click the account
          →  Password  →  set a strong one

The two ways to lose points here

1. Deleting an account the ReadMe authorized.
2. Turning your own account from Administrator into Standard. Do that and you cannot fix anything else.

Read the ReadMe's two lists before every change on this page.

Try it yourself

Open Settings > Users with the ReadMe next to it, and go through every account on the page. For each one write down which of the three fixes it needs, if any. Then make the changes.