Parental Controls on Windows 11, Mac and Chromebook: Set Up Your Kid's New Laptop

Set up Windows 11 parental controls: the account-to-block route

To set up Windows 11 parental controls, connect your teen’s own personal Microsoft account to your family and to their Windows sign-in, then apply one rule. Sit down together first: explain which limits you are adding and what reports you will see. Keep your own adult Windows administrator account separate.

1. Create the family link. Sign in as the adult at Microsoft family. Add your teen’s personal Microsoft-account email as a Member and have them accept the invitation. Your role is Organizer. Check: their correct email appears as a member, not Pending. Complete any consent request first. Family-group instructions.
2. Enable the teen’s Windows sign-in. From your adult account, open Settings → Accounts → Family to find the accepted Member. Microsoft’s connection instructions give the older route Family & other people → Your family → child → Allow, followed by the teen signing into Windows with that same personal Microsoft account. The current account guide does not name the Family-page sign-in button. If the relevant control is absent, use the current guide for your Windows layout before continuing; do not assume an undocumented button exists. Check: the laptop appears under the teen’s connected Windows devices in the family dashboard. If it does not, recheck the invitation, Windows identity and sign-in permission. Office sign-in alone is insufficient. Current account guide; connection requirements.
3. Check permissions. Keep a working adult administrator account. Microsoft recommends a Standard Windows account for the teen; family features may work incorrectly with administrator rights. If the teen’s account is listed under Other users, Microsoft documents this general type-change route: Settings → Accounts → Other users → account → Account options → Change account type → Standard user → OK. The guide does not document every Family-page layout. Family Member does not automatically mean Windows standard user. Resolve a missing type-control through the current guide before relying on limits. Account-type controls; recommended configuration.
4. Add one website rule. In the family dashboard, select your teen and open their Edge/web-filtering settings; menu labels vary. Enable Filter inappropriate websites and searches and add https://example.com to the blocked-sites list. This also blocks unsupported browsers, so check school-browser needs first. Use an ordinary Edge profile signed into your teen’s same Microsoft account. Filter scope and controls.
5. Verify the whole chain. With your teen, open https://example.com in that Edge profile. Look for the family restriction message, not simply a network error. Remove the temporary block afterward. If it still loads, first compare the Windows and Edge email addresses with the member you configured, then recheck the switch and saved URL.

The steps reflect documentation checked on October 16, 2026, not our own device testing. Labels vary between interfaces; the account, permissions and connected-device checks are the criteria for this setup.

Set Windows time limits and purchase rules separately

To limit Windows use, choose the whole laptop or one app. In your teen’s family card, select Windows and turn on device limits to set hours and duration. For an app/game allowance, open the selected app or game from the member’s device controls and set its time limit; labels vary. Device limits and app limits are separate controls.

For a safe check, agree a short limit on an already installed non-school game, save progress, and account for time already used that day. Leave enough device time for the game test. The documented expectation is that access is restricted when the app allowance runs out. If it continues, check the selected game entry, device, day and permitted hours. An app timer is not a timer for the game’s website.

For spending, open Spending → Manage spending and review Require approval for every purchase and purchase notifications. Despite that label, Microsoft describes exceptions: age-appropriate purchases can use funded account balance, and non-Microsoft in-app billing falls outside Family Safety purchase approval and spending history. Read the current spending rules; this is not approval for every online checkout. Check saved settings without making a paid test purchase.

Which controls cover your laptop and account?

Coverage depends on the combination of operating system, account and browser. The matrix below maps the same tasks across six cases. “School policy” means the school must confirm the configuration; it does not mean every school has enabled every available restriction.

The practical conclusion: choose the row for the actual sign-in, not just the logo on the laptop. A personal supervised Chromebook with a school account added inside that profile is a separate, supported arrangement described below.

Block inappropriate websites on a Windows PC, Mac and Chrome

To block inappropriate websites, use the supported account/browser filter and keep a short exception list for schoolwork. Automatic categories are imperfect. A blocked lesson page needs an exception review; a page that loads is not proof that all filtering is off.

• Windows: use the signed-in Edge route above. Family Safety website and search rules do not filter Chrome or Firefox pages. Enabling the filter also blocks unsupported browsers. If you need to restrict another browser separately, manage it as an app in the member’s Windows app/game controls, selecting the app and its block option; do not call that browser-content filtering. Microsoft web scope; app blocking.
• Mac: in the updated macOS 27 family interface, open System Settings → Family → your teen → Apps & Websites. Website filtering, manual Blocked/Allowed entries and Ask to Browse requests are distinct controls. For an end-to-end manual block, follow the example.com check in the Mac section below. For automatic filtering or requests, use Apple’s version-specific instructions and check the mode actually saved. Apple names Safari and other supported browsers, not every browser/version. Apple’s website/request controls.
• Personal Chromebook: in Family Link, select your child and use the Google Chrome / Manage sites controls named in Google’s current guide; labels vary. Google also offers automatic filtering and approved-sites-only modes. Verify the manual rule in the child’s supervised Chrome session, then remove it. Chromebook instructions; filter options and limits.
• Home network: a family DNS service such as OpenDNS FamilyShield can filter domain lookups that actually use that service. It does not inspect individual comments or provide laptop app timers. School-managed networking can route lookups elsewhere; ask the school about compatibility. Cisco’s FamilyShield scope. Keep necessary school sites working.

If you’ve already found something in the browser history

Start with what you actually know: an entry is a record in that browser, not a complete explanation of why it appeared or a transcript of what your teen thought. Ask calmly what happened before changing several controls at once. A possible opening: “I noticed this page and want to understand it. Was it something you meant to open, or did something send you there?” Keep the conversation separate from the technical check; a filtering gap is not evidence that your teen caused it.

Set up Mac Screen Time: choose the right version route

To set up parental controls on a Mac, give your teen their own Standard macOS user and Apple Account, retaining a separate adult administrator. For remote management, use Family Sharing and an Organizer or Parent/Guardian role. Without Family Sharing, Apple also documents setting Screen Time directly in the child’s Mac user account. Child Mac setup; local and family management. A Standard account is not an all-install approval gate; Apple distinguishes its permissions from an administrator’s in the Mac user-account guide.

macOS 27 with updated family settings

Apple’s new interface starts at System Settings → Family → your teen. It includes Time Allowances, Screen Time Schedule and the website controls above. Updating the Mac alone does not complete the move: follow Apple’s separate family-settings upgrade instructions, including their Legacy Devices guidance. Do not assume older devices gain identical coverage. Manage the Screen Time lock from the parent device in Manage Screen Time → Lock Screen Time Settings. Version 27 setup. Availability varies by region, language and model.

Check the new interface: open your teen’s Apps & Websites settings from Family and use Add to select the website example.com and block it. Follow its on-screen field/format instructions and confirm the saved entry on the Blocked list. In the teen’s Mac user account, open that domain in Safari and look for a Screen Time block. A generic network error is inconclusive. Remove the test rule afterward. If the site loads, check the selected child, saved entry and completed family-settings upgrade. This proposed check concerns one manual rule, not automatic content classification. Apple’s website controls.

Previous Screen Time interface, including macOS 26

Use System Settings → Screen Time → Family Member → your teen; for local setup, work in the teen’s user account. Turn on activity tracking and lock the settings. For a short app check, choose App Limits → Add Limit, select a non-school app and enable Block at end of limit. The previous interface also uses Downtime. Follow the version-specific guide rather than looking for Time Allowances; see the exact App Limits controls.

Expected result and diagnosis: after saving work, the chosen app should meet the configured restriction at its limit. If it does not, check the selected family member, Apple Account, interface version, saved limit and any Always Allowed exception. Review usage for this Mac rather than All Devices. Activity reporting is a usage view, not a conversation log. Ask to Buy is separate and covers eligible Apple purchases/downloads, not every installer from a website.

Set up a personal Chromebook without confusing school accounts

To control a personal Chromebook, sign into ChromeOS with your teen’s personal Google Account supervised through Family Link. Full enrollment belongs in our Family Link setup guide. Google documents ChromeOS 71+ as the general minimum; newer app controls have their own requirements. Check the actual signed-in child profile: another account or guest session is not automatically that supervised child. Google’s Chromebook prerequisites.

For time, Family Link offers daily device limits; daily limits apply to each device separately, so check the allowance saved for this Chromebook. Eligible per-app limits require ChromeOS 83+ and exclude system apps. Save work and agree a short non-school app check; if the limit does not apply, check the child profile, supported app and device rather than treating it as a universal website timer.

School account added to a personal supervised profile: Google supports this on ChromeOS 89+. Add it as a secondary account inside the Family Link profile using the school-account instructions, not as a separate sign-in user. Family Link time restrictions still apply to the supervised session; the school controls its Workspace services. This does not give the parent access to private school records.

Worked example: a school laptop on home Wi-Fi

Hypothetical case: your 15-year-old brings home a school-managed Chromebook and signs in with their school account. You want homework sites available, a game blocked and use finished by an agreed evening time. Home Wi-Fi does not turn this into the personal Family Link case. Google says parents cannot add Family Link restrictions to that school-managed account/device combination.

• Device layer — school: enrollment and the school’s device settings remain. Ask IT which apps/sign-ins are permitted and whether it offers an evening-use policy. Do not remove management or install a monitoring tool without authorization. How Google describes a managed Chromebook.
• Account/browser layer — school: user policies can enforce URL rules at home and school. Ask whether the game is a website or an installed app and which school policy covers it. A filter used only on campus is a different layer; its off-campus coverage needs confirmation. Google’s home-learning configuration guidance.
• Network layer — parent: router controls may restrict connectivity on your home network; DNS filtering only acts on the relevant domain requests. Neither supplies a Family Link app timer or prevents offline schoolwork. If school networking interferes with the home DNS path, ask IT what compatible option it supports. DNS limits.

Decision: ask the school to confirm the game restriction and evening policy before relying on them. For tonight, agree where the laptop stays after homework and retain access to necessary assignments. If you can control your home router, a supported network schedule can manage connectivity there; describe it as an internet rule, not a locked computer. Check only with a harmless school-approved page and the school’s permission for a test rule.

What can the school see—including Google Docs?

Ask for the actual monitoring policy: data collected, operation outside school hours, staff access and retention. A managed label does not prove that every teacher can watch every screen or message.

Teens can communicate through Docs comments and chat inside a shared file. Treat those as communication spaces when discussing school rules, without assuming they are private or offering ways to hide activity. Ask your teen who can access a shared document and what the school permits. A site filter cannot evaluate every exchange inside an allowed document.

Built-in controls vs third-party software: what to check before you install

Use built-in controls for a supported task, then consider another tool only for a gap you can name. A cross-platform dashboard is useful only if its actual device, browser and account coverage matches your household. It cannot grant you authority over a school-managed device.

• Transparency: show your teen the tool and the parent view; choose a proportionate rule and a review date.
• Data scope: distinguish app time, websites, screenshots and message claims. Check collection, retention, deletion and who can access the data.
• Compatibility: verify the current OS, browser, account roles and school permission, rather than relying on a platform logo.
• Reliability: ask how disabled permissions or configuration changes are reported. Repeat the benign end-to-end check after updates; do not confuse a dashboard switch with a working restriction.

For the broader age-by-age approach, use our parental-controls guide. Keep your first setup small enough to verify: one appropriate account, one supported rule, one clear result, and an agreed time to review it.

Frequently asked questions