Windows 11 Parental Controls (Microsoft Family Safety) — Complete Setup Guide

Learn how to create a child account and configure screen time, app restrictions, and spending limits on Windows 11.

Why Windows 11 controls are worth setting up

Most parents who think about parental controls focus on phones and tablets. The Windows PC in the family room or the laptop the kid uses for homework gets ignored. That's a real gap — Windows is where a lot of the higher-leverage interactions happen: longer-form web browsing, school-research that drifts into Reddit/YouTube, and Discord/Steam access that doesn't exist on a locked-down phone.

Microsoft Family Safety is the umbrella product that powers parental controls on Windows 11. It also covers Xbox (the same family group + same controls) and Android apps. It's free, included with any Microsoft account, and meaningfully capable. The cross-platform piece is the under-appreciated win — set it up once, and your kid's PC, Xbox, and Android phone all share the same time limits and content filters.

This guide covers the Windows 11 side specifically. We have separate guides for Xbox Family Safety (most of which applies but with console-specific details) and Google Family Link (Microsoft Family Safety on Android is a strict subset of Family Link's coverage — for full Android control you want Family Link).

What Family Safety actually does on Windows 11

When a parent links a child's Microsoft account into the family group:

Time limits — both daily caps AND scheduled access windows (block specific hours)
Web filtering in Microsoft Edge — blocks by category (adult, gambling, drugs, violence, weapons) + custom block/allow lists
App and game filters — by age rating, plus per-app blocks
Purchase blocks — require parent approval for Microsoft Store purchases (apps, games, in-game)
Activity reports — weekly email summary of screen time, app usage, browsing categories, blocked-content attempts
Time extension requests — kid asks for "10 more minutes", parent approves from phone
Cross-platform sync — same controls apply to Xbox console + Android apps if those are linked

What parents cannot see:

Specific message content in apps (Discord, Steam Chat, etc. — those are app-level)
Edge browsing in InPrivate mode (when allowed) — Family Safety still logs categories, but doesn't surface specific URLs
Activity in non-Microsoft browsers if those are installed (Chrome, Firefox, Brave) — covered below

Setup Part 1 — Create or sign into a Microsoft Family group

You need:

Your own Microsoft account (the parent). If you don't have one, create at account.microsoft.com.
Your child's Microsoft account. If they're using Windows 11 with a local-only account, you'll need to add a Microsoft account first (covered below).
A few minutes physically with the Windows 11 PC plus your phone.

Steps

Go to family.microsoft.com and sign in with your parent Microsoft account.
Tap Add a family member → Member → enter your child's Microsoft account email (or phone number).
Microsoft sends an invitation. Your child accepts on their email/phone.
Once accepted, your family group shows the child under Family members. Their device(s) appear automatically once they sign in.

If your child uses a local-only Windows account

Windows 11 Home increasingly forces Microsoft account sign-in, but some setups (especially Pro / Enterprise / older installs) still allow local accounts. Family Safety can't manage a local-only account. To convert:

On your child's PC, Settings → Accounts → Your info → Sign in with a Microsoft account instead.
Sign in with their Microsoft account (or create one in the same flow). Their existing files, apps, and settings transfer to the Microsoft-account profile.
Once converted, the account becomes manageable via the family group.

Install the Family Safety mobile app (recommended)

The web dashboard at family.microsoft.com works, but the Microsoft Family Safety app on iOS/Android gives you push notifications for time-extension requests, activity-report alerts, and quick-edit access from your phone.

Install from App Store / Google Play.
Sign in with your parent Microsoft account.
Your family group syncs.

Setup Part 2 — Configure screen time

This is where Microsoft's approach diverges from Apple/Google. Family Safety uses scheduled access windows as the primary control, with daily limits as a secondary layer on top. Most other platforms invert that.

Scheduled access windows

Set specific hours when the device can be used. Outside those hours, the kid is locked out (a "you can't use this PC right now" screen).

The two windows worth setting:

School hours + late evening blackout — example: PC available 6:00am–8:00am (before school), 3:00pm–9:00pm (after school + evening), locked everywhere else.
Different schedules weekday vs weekend — most families want longer windows on weekends.

To set: family.microsoft.com → child → Screen time → Windows (or Xbox) → toggle Use one schedule for all devices OR set per-device → drag the access bar across each day.

Daily time limit (cap on top of windows)

Independent of the access window, you can also cap total daily use. Example: PC available 3pm–9pm but capped at 3 hours total. The kid can spread the 3 hours however they want within the window, but can't exceed.

Recommended:

Under-9: 30 min/day weekdays, 1 hour/day weekends
9–12: 1 hour/day weekdays, 2 hours/day weekends
13+: family conversation — typical is 2–3 hours/day if homework drives PC time

To set: same panel → Daily limit → set per device or globally.

Time extension requests

When the kid hits a limit, they see an option to Request more time. The request lands on your phone (push notification if you have the app) — you tap to grant 15min / 30min / 1hr or deny.

This is a useful friction-reducer. Use it; don't disable it.

Setup Part 3 — Web filtering (Microsoft Edge)

Family Safety's web filter only works inside Microsoft Edge (Microsoft's browser). It does NOT filter Chrome, Firefox, Brave, or any other browser. Critical: if your kid has another browser installed, the web filter is bypassed entirely.

Steps

family.microsoft.com → child → Content filters → Web and search.
Toggle Filter inappropriate websites and searches on.
By default, this enables:
- Bing SafeSearch on Strict
- Adult content blocked in Edge
- Block all sites except those allowed (an extreme option — usually leave off)
Add specific blocks under Blocked sites (e.g., specific social platforms you don't want them on).
Add allow-list under Allowed sites — only relevant if you turn on the "block all except allowed" mode.

Block other browsers

This is the hidden critical step. Without it, your kid installs Chrome and the entire web filter does nothing.

Two ways to block:

Option A: App-block via Family Safety

family.microsoft.com → child → Content filters → Apps and games → search for the browser names → Block.
Effective for Chrome, Firefox, Brave, Edge Beta — anything they'd install.

Option B: Restrict app installs

family.microsoft.com → child → Spending → Microsoft Store → require parent approval for new app installs.
Combined with Option A, this catches both the apps already installed and any new install attempts.

Both are belt-and-suspenders. Use both.

Setup Part 4 — App and game restrictions

Family Safety filters apps and games by their age rating from the Microsoft Store / Xbox Store.

Set the age limit

family.microsoft.com → child → Content filters → Apps and games.
Choose the age band: 6, 7, 8, 9, 12, 16, 18.
Anything rated above the selected age is blocked. Apps that are already installed and exceed the rating get blocked too.

Per-app blocks

Beyond the age-rating filter, you can block specific apps regardless of rating.

The list of apps worth specifically blocking on a Windows PC for younger kids:

Steam (if you don't want gaming on the PC) — kids will use Steam to install games that bypass the Microsoft Store rating
Discord (if you'd rather they use it on a managed device) — Discord on Windows is fully featured, including voice/video, Nitro purchases
Epic Games Launcher — same risk pattern as Steam
VPN apps — important. A VPN on Windows can route traffic outside Family Safety's filters.

To block: search for the app name in the Apps and games dashboard → Block.

Setup Part 5 — Spending and Microsoft Store

Microsoft Store purchases — apps, games, in-game content, subscriptions — can be locked behind parent approval.

family.microsoft.com → child → Spending → Microsoft Store.
Toggle Need an adult to approve every purchase on.
Optional: add credit to your child's account for managed-spending allowance ("kid has $20 to spend, no approval needed for purchases under that").

When the kid tries to buy something, you get a notification on your phone with the item details. Approve or deny.

This catches:

Direct app/game purchases
Subscription auto-renews
In-game DLC and microtransactions (when bought through the Microsoft Store rather than in-game with stored credit)

It does NOT catch:

In-game purchases made with Robux/V-Bucks/etc. — those are platform-specific currencies
Steam purchases — Steam has its own family approval system (covered in our Steam guide)
Purchases made through a credit card directly added to a non-Microsoft account

Setup Part 6 — Activity reports

Once a week, Microsoft emails you (the parent) a summary of your kid's activity. The Family Safety app also surfaces this on demand.

What's in it:

Total screen time by day, broken out per device (PC, Xbox, Android)
Most-used apps with time per app
Web browsing — summary by category (e.g., "5 hours on social media, 30 minutes on news, 2 hours on gaming sites")
Search terms — what your kid searched in Bing/Edge
Blocked content attempts — sites they tried to visit that got blocked

The weekly cadence is useful for routine — read it Monday over coffee. The daily detail is in the app if you want to dig in mid-week.

Setup Part 7 — Lock down at the OS / network layer

Family Safety is the on-PC layer. Two more layers cover the gaps:

Local administrator account (the bypass-blocker)

If your kid's account is a standard user (not administrator), they cannot install software that requires admin privileges. This is the single most-effective Windows-specific lockdown, and it's free and built-in.

Check: Settings → Accounts → Your info on the kid's PC. If it says "Administrator", they have full system access — including the ability to disable Family Safety.

To downgrade:

Sign into the PC with a parent administrator account (you'll need to set one up first if you haven't).
Settings → Accounts → Family & other users.
Click your child's account → Change account type → Standard user → OK.

Now your kid can use Windows normally but can't install software requiring admin elevation, can't change Windows settings that require admin, and can't disable Family Safety.

This is the single biggest miss in most Windows family setups.

Network layer (DNS filtering)

For "no Windows in the bedroom" or "no internet on the PC after 10pm" boundaries, DNS filtering at the router or device level catches the gaps Family Safety doesn't. Useful especially for blocking VPN-bypass attempts and for filtering non-Edge browsers.

(Cross-link: see our NextDNS for Families guide and DNS at your router.)

Common bypass attempts

Ranked by frequency:

1. "I'll install Chrome and use that — Family Safety only filters Edge."

Works completely if not blocked.
Counter: block other browsers (Setup Part 3 above) AND set app-install approval.

2. "I'll create another local Windows account."

Works if you didn't restrict account creation.
Counter: standard-user downgrade (Setup Part 7) prevents account creation. Plus, family.microsoft.com → child → settings can require admin approval for system changes.

3. "I'll use a VPN to route around the web filter."

Works if a VPN app is installed.
Counter: block VPN apps explicitly (Setup Part 4). Plus DNS-level network filtering catches VPN attempts at the router level.

4. "I'll factory-reset Windows to clear Family Safety."

Works if your kid is administrator. Doesn't work if they're standard user (factory reset requires admin).
Counter: standard-user downgrade.

5. "I'll just guess the parent password."

Don't pick something obvious. The Family Safety toggle is in your Microsoft account, which is protected by your account password — make sure that's strong + 2FA enabled.

6. "I'll change my time zone in Settings to confuse the time-limit logic."

Doesn't work — time limits use Microsoft's server-side time, not the local OS clock.

7. "I'll uninstall Family Safety."

Family Safety isn't an app on the PC — it's enforced server-side via the Microsoft account. There's nothing to uninstall.

What Family Safety doesn't cover

Be honest about the fence:

Non-Microsoft browser content unless those browsers are blocked (covered above)
Specific browsing sessions in InPrivate — Edge's InPrivate mode logs less detail in activity reports
App-internal content — what's said in Discord, Steam Chat, in-game chat, etc.
VPN-tunneled traffic unless the VPN is blocked
Removable-media activity — USB sticks, external drives. If the kid plugs in a USB with content from a friend, Family Safety doesn't see it.
Group-policy or registry-edit-level changes — only relevant if your kid is admin and technical, which the standard-user downgrade prevents
Content viewed through cloud storage that bypasses local browsing — e.g., Google Drive previews, OneDrive shares — these run inside the browser but aren't necessarily filtered as web content

Operational rhythm

First week: glance at the Family Safety app once a day. You're calibrating: how much time on PC, what apps, any browsing patterns?
First month: read each weekly activity-report email. Watch the search-terms list and the blocked-content attempts — both are early-warning signals.
Ongoing: monthly. Look for changes relative to baseline.
After a time-extension request: granting occasionally is fine; if it becomes the default, your daily limit is set wrong. Re-evaluate.
After a blocked-content attempt for something concerning: not panic, conversation. "Hey, I noticed you tried to visit [site] — what's up with that?" Most are curiosity, some are intentional. Either way it's a signal.
After a Windows update: Family Safety settings are server-side and not affected by Windows Updates. Don't worry about checking after them.

What to actually talk to your kid about

The dashboard is a backstop. The conversation is the work.

"What do you mostly use the PC for?" Open question. Schoolwork, gaming, social media, video, code/creative? You'll learn where the action is.
"Have you ever tried to get around the time limits or the web filter?" Asking honestly opens the door. Most kids will half-admit to it; that's fine.
"What would you do if a website you visited tried to install something or asked for personal information?" Right answer: close it, tell you. Validate.
"Have you ever installed anything you didn't tell me about?" Ask about non-Microsoft Store installs specifically. Mods, Discord plugins, browser extensions — these are common, often fine, occasionally not.

What NOT to lead with:

"I'm reading your activity reports." They know. Mention it once for transparency, then don't dwell.
"You can't have a PC anymore." Removal isn't the move; supervised use plus conversation is.

Bottom line

Microsoft Family Safety is genuinely capable on Windows 11 — time limits, web filter, app/game restrictions, spending controls, activity reports, all included free with any Microsoft account. The cross-platform sync (PC + Xbox + Android) is the under-appreciated win.

The two structural gaps that bite most parents:

The web filter only covers Microsoft Edge. If Chrome is installed, the filter does nothing. Block other browsers.
Administrator accounts can disable Family Safety. Standard-user downgrade is the single biggest Windows-specific lockdown.

The realistic stack:

Standard-user downgrade for the kid's account (Setup Part 7)
Family Safety with web filter, app blocks (including non-Edge browsers + VPNs), spending approval
DNS-level filtering for additional bypass-resistance and time-of-day boundaries
The conversation — about what's installed, what's been tried, what kid wants the PC for

If you do nothing else after reading this guide, do these three things tonight:

Add the kid to your Microsoft family group at family.microsoft.com
Downgrade their account to Standard user (Setup Part 7) — this is the highest-leverage 2-minute change
Block non-Edge browsers and require parent approval for new app installs

The rest can wait until next weekend.

For Xbox console-side controls (most settings overlap but with console-specific details), see our Xbox Family Safety guide. For Android devices that share the family group, see Google Family Link. For network-level filtering of all devices, see NextDNS for Families.

No affiliate relationship with Microsoft.