I've installed Windows 10 Professional on a PC with only one account, a local administrator. This PC needs to be as secure as possible and it will also never be attached to a Microsoft account. The local admin account is the only account this PC will ever have. At the moment I am still inexperienced with Windows 10 and configuring it securely so I'm not sure how to remove the password reset option from the login screen.
If you're unfamiliar with the option I'm referring to, when I type the admin account password incorrectly once, a "Reset Password" link shows up below the password box which then allows me to reset the password if I provide the correct answers to the security questions that are displayed after clicking the link. This may be OK in a home/personal setting but I find this highly insecure in a business setting.
The security questions you can choose from to protect the reset are "canned" and refer to very common or easy to come by information about a person and therefore are not very secure. I would like to know how to remove this reset link from the login screen, making it much more difficult for anyone to reset the password without actually logging in to the account first.
I have been searching for the answer to this question but all I can find so far are results like "how to bypass the login screen" or "how to remove the login password." ...Let me be very clear, I am not interested in answers to either of those questions. My question is very specifically "How do I get rid of/turn off the option to reset a local account's password from the Login screen?"
I am hoping there may be something available in group/local policy that can be turned off in order to achieve the desired effect?