Skip to main content

How to Delete a Local User Account in Batch Script

Deleting a local user account is a common administrative task, often required when an employee leaves, a temporary account is no longer needed, or as part of a system cleanup or offboarding process. The standard, built-in command-line utility for managing local accounts, including their deletion, is the powerful NET USER command.

This guide will teach you how to use the NET USER ... /DELETE command to permanently remove a local user account. You will learn the critical safety considerations of this irreversible action, the importance of running the script as an administrator, and the best practices for creating a safe and reliable user deletion script.

CRITICAL WARNING: This is a DESTRUCTIVE Operation​

The NET USER ... /DELETE command PERMANENTLY removes a user account from the system.

  • This action is irreversible. You cannot "undelete" a user account.
  • While the command removes the account from the security database (SAM), it does not delete the user's profile folder (C:\Users\<username>). This is a safety feature to prevent accidental data loss, but it is a step you must handle separately.
  • Always double-check the username. Deleting the wrong account can have serious consequences.

The Core Command: NET USER ... /DELETE​

The NET USER command is the primary tool for managing local user accounts. The /DELETE switch is used to remove an account.

Syntax: NET USER <username> /DELETE

  • <username>: The name of the local user account you want to delete.
  • /DELETE: The switch to remove the account.

This command must be run with administrator privileges.

Basic Example: A Simple User Deletion​

This script will permanently delete the local user account named TempUser. It must be run as an Administrator.

@ECHO OFF
SET "UserName=TempUser"

ECHO --- Deleting Local User Account ---
ECHO.
ECHO WARNING: This will permanently delete the user '%UserName%'.
PAUSE

NET USER %UserName% /DELETE

IF %ERRORLEVEL% EQU 0 (
    ECHO [SUCCESS] User '%UserName%' was deleted successfully.
) ELSE (
    ECHO [FAILURE] The command failed. See error message above.
)

How the NET USER ... /DELETE Command Works (User Profiles and SIDs)​

When you run NET USER ... /DELETE, it interacts with the local Security Account Manager (SAM) database. It finds the user account and removes its entry, including its unique Security Identifier (SID) and its password hash.

However, the command intentionally does not touch the user's profile folder (e.g., C:\Users\TempUser). This is because the profile folder may contain important documents that need to be backed up or transferred to another user. The deletion of the profile folder is a separate, manual, and equally destructive step.

Common Pitfalls and How to Solve Them​

Problem: "Access is denied." (Administrator Privileges)​

This is the number one reason for failure.

Solution: The script must be run from an elevated command prompt. Right-click your .bat file or cmd.exe and select "Run as administrator."

Problem: The User Account Does Not Exist​

If you try to delete a user that doesn't exist, the command will fail.

Example of error message:

The user name could not be found.

Solution: A robust script should first check if the user exists before attempting to delete them. This prevents unnecessary errors in your script's output.

NET USER "%UserName%" > NUL 2> NUL
IF %ERRORLEVEL% EQU 0 (
    ECHO User exists. Proceeding with deletion...
    NET USER "%UserName%" /DELETE
) ELSE (
    ECHO User does not exist. No action needed.
)

Problem: The User's Profile Folder Remains​

This is not a bug but a feature. NET USER /DELETE does not remove the user's data.

Solution: If your goal is to completely remove all traces of the user, you must manually delete their profile folder after deleting the account. This requires a separate command and extreme caution.

SET "ProfilePath=C:\Users\%UserName%"
IF EXIST "%ProfilePath%\" (
    ECHO Deleting the user's profile folder...
    RMDIR /S /Q "%ProfilePath%"
)
warning

Warning: This RMDIR /S /Q command is just as destructive as the NET USER command and will permanently delete all of the user's files without sending them to the Recycle Bin.

Practical Example: A Safe "Offboarding" Script​

This script provides a safer, more complete offboarding process. It takes a username as an argument, confirms the action, deletes the user account, and then separately prompts the administrator about deleting the profile folder.

@ECHO OFF
SETLOCAL
REM This script must be run as an Administrator.
SET "UserName=%~1"

IF "%UserName%"=="" (ECHO Usage: %~n0 <username> & GOTO :End)

ECHO --- Full User Offboarding Script ---
ECHO Target User: %UserName%
ECHO.
ECHO WARNING: This will PERMANENTLY delete the user account.
PAUSE

REM --- Step 1: Check if user exists ---
NET USER "%UserName%" > NUL 2> NUL
IF %ERRORLEVEL% NEQ 0 (
    ECHO [FAILURE] The user account '%UserName%' does not exist.
    GOTO :End
)

REM --- Step 2: Delete the user account ---
ECHO Deleting user account...
NET USER "%UserName%" /DELETE
ECHO [SUCCESS] User account deleted.
ECHO.

REM --- Step 3: Handle the user profile folder ---
SET "ProfilePath=C:\Users\%UserName%"
IF EXIST "%ProfilePath%\" (
    ECHO The user's profile folder still exists at: "%ProfilePath%"
    CHOICE /C YN /M "Do you want to permanently delete this folder and all its data?"
    IF %ERRORLEVEL% EQU 1 (
        ECHO Deleting profile folder...
        RMDIR /S /Q "%ProfilePath%"
        ECHO Folder deleted.
    ) ELSE (
        ECHO Profile folder was NOT deleted. Please archive it manually.
    )
)

:End
ECHO --- Offboarding script complete ---
ENDLOCAL

Conclusion​

The NET USER ... /DELETE command is the definitive tool for removing local user accounts from a batch script.

Key takeaways for using it successfully and safely:

  • This is an irreversible and destructive operation.
  • You must run your script as an Administrator.
  • The command NET USER <username> /DELETE only removes the account, not the user's profile folder.
  • The user's profile folder (C:\Users\<username>) must be deleted separately with RMDIR /S /Q, which is also an irreversible action.
  • A robust script should always check if the user exists before trying to delete them.

Table of Contents