What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
On Debian, create a local account with sudo adduser alice, grant normal administrator access with sudo adduser alice sudo, remove only that access with sudo deluser alice sudo, and delete the account with sudo deluser alice. Add --remove-home only when the user’s home directory and mail spool should also be removed. Group changes take effect at the next login, so the target user must start a fresh session before testing or revoking access.
Need a server to try this on? Antihost offers Linux VPS plans with NVMe storage, full root access and a 14-day free trial.
Quick command reference
| Task | Command | What it changes |
|---|---|---|
| Create a regular local user | sudo adduser alice |
Creates the account, home directory and initial configuration files. |
| Grant broad sudo access | sudo adduser alice sudo |
Adds the account to Debian’s standard sudo group. |
| Grant broad sudo access, low-level form | sudo usermod -aG sudo alice |
Appends sudo to the user’s supplementary groups. |
| Check identity and groups | id alicegetent passwd alice |
Shows numeric IDs, group membership and the passwd database entry. |
| Remove sudo but keep the account | sudo deluser alice sudo |
Removes the user from the sudo group without deleting the account. |
| Delete the account, retain files | sudo deluser alice |
Removes the account while retaining its home directory and other files. |
| Delete the account and home | sudo deluser --remove-home alice |
Removes the account, home directory and mail spool when applicable. |
Before changing accounts or privilege
Use an existing root shell or an administrator account that already works with sudo. Keep one known-good administrative session open while editing group membership or sudo policy. If a command is mistyped or a policy file becomes invalid, that session may be the only way to repair access.
As an Amazon Associate I earn from qualifying purchases.
Confirm which account you are changing and whether it is a normal login account or a service account. A name that looks like a person’s login may still own files, scheduled work or a service. Check the identity before making destructive changes:
id alice
getent passwd aliceAccount membership and sudo policy are separate things. A user can exist without administrative rights, belong to ordinary supplementary groups, or receive narrowly defined commands through a sudoers rule. Decide whether the person needs unrestricted administration or only one maintenance operation before choosing a method.
#1 Best Overall
- BLUE LIGHT BLOCKING GLASSES: Our blue light glasses for women boast UV400 protection, blocking harmful blue rays from computer screens. With these bluelight glasses women, you can enjoy gaming, reading, or watching TV with no worries of eye strain.
- EYE RELIEF: Our blue light glasses are engineered to reduce blurry vision or strain caused by prolonged screen time. These womens blue light glasses aid in better sleep by preventing blue light from disrupting your natural sleep cycle, helping you fall asleep faster and enjoy a more restful night's sleep, making them the perfect christmas present.
- COMFORTABLE: Crafted from durable material, our trendy blue light glasses for woman or blue light glasses men ensure long-lasting comfort. The high-transmittance lenses accessories, gamer gifts for men, help keep your eyes relaxed. Perfect stocking stuffers, gifts for gamers men, christmas gifts for men, halloween costumes.
- LIGHTWEIGHT: These clear blue light glasses feature a lightweight frame, meaning they’ll stay comfy for long-term wear. Perfect as blue blockers glasses for women or mens blue light glasses, these non-prescription fake glasses for men can be worn throughout the day. The blue light blocking glasses women feature polycarbonate HD lenses, which are anti-reflective and restore true color.
- WORRY-FREE PURCHASE: If you experience any issues, our support team is ready to assist you quickly. These are the perfect costume glasses for cosplay dressing up.
How Debian creates a local user
Use adduser for a normal login account
Debian’s adduser command is the policy-aware front end for local account creation. It chooses account IDs according to Debian policy, creates a home directory and installs skeletal configuration files by default, then asks for the account’s password and optional descriptive information.
- Run the command from a root shell or through an authorized administrator:
sudo adduser alice - Answer the password and identity prompts. The descriptive fields can be left blank if they are not needed.
- Confirm that the account was created and inspect its groups:
id alice getent passwd alice
The resulting account is not automatically an administrator. Creating the login and granting sudo are separate operations, which lets you add ordinary users safely when they should not manage the system.
Free tools Windows power users keep installed
One-click scans. No signup required.
Verify the account before granting anything
getent passwd alice confirms that the account is visible through the system’s passwd database and shows its home-directory and login-shell fields. id alice shows the numeric user ID, primary group and supplementary groups. Run these checks before adding the account to a privileged group so that a spelling error does not grant access to the wrong name.
Grant standard Debian sudo access
Add the user to the sudo group
For a trusted administrator who needs to run arbitrary commands as root, use Debian’s standard group:
sudo adduser alice sudoThe Debian-specific adduser USER GROUP form adds an existing user to an existing group. The equivalent low-level command is:
sudo usermod -aG sudo aliceThe -a means append. Without it, usermod -G replaces the user’s supplementary-group list, which can silently remove unrelated memberships. If you use the low-level form, always include every supplementary group the account should retain.
Start a new login session
Group membership is established when a login session starts. The shell in which you ran adduser or usermod does not automatically gain the new group. Have Alice completely log out and sign in again, or open another fresh login session. A reboot also creates fresh sessions, but it is usually unnecessary.
Rank #2
- WINDEX GAMING WIPES: effortlessly clean all your gaming gear and gaming electronics in one easy step with our new Windex Gaming Wipes
- AMMONIA FREE: our ammonia-free formula is safe to use on all of your favorite gaming equipment like consoles, headsets, controllers, screens, keyboards, and more
- PRE-MOISTENED WIPES: each wipe instantly removes dust, dirt, and stubborn smudges and fingerprints leaving a streak-free shine
- ANTI-STATIC: great for cleaning and wiping down your gaming gear and electronics leaving behind no visible residue
- COMPACT RESEALABLE PACKAGE: store your pack of Windex Gaming Wipes anywhere in your home for whenever a quick and easy wipedown is needed
For a direct test from an administrative shell, start a login shell as the user:
su - alice
id alice
sudo -v
sudo whoamiThe final command should print root. id alice should include sudo among the groups. End the temporary shell with exit when the test is complete.
Understand what group membership grants
Debian’s default sudo configuration allows members of the sudo group to run any command through sudo. That is broad administrator authority, not a limited “restart one service” permission. It is simple to maintain, but compromise of the account can expose the entire system. If the user only needs a defined task, use a sudoers drop-in instead.
Remove sudo without deleting the account
Use Debian’s group-removal command
To keep Alice’s login, home directory and ordinary group memberships while removing the standard administrator path, run:
sudo deluser alice sudoThis is the Debian-specific operation for removing a user from a group. It does not erase the account or its files.
If you use usermod, preserve the other groups
The low-level alternative is to replace the supplementary-group list with the groups Alice should retain:
sudo usermod -G group1,group2 aliceDo not copy that example literally without inventorying the account’s intended memberships. Any group omitted from the replacement list is removed. For most Debian administration, deluser alice sudo is safer and clearer when the only goal is to revoke sudo-group membership.
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchRank #3
- Ergonomic & Adjustable Design: Fight "text neck" and improve your posture. Designed for comfort, it offers an adjustable height (7.1in-8.5in) (1.4in adjustable range) and angle (5°-85°) Please note: cell phone stand is only 9 inches tall—the length of a standard pencil
- Without blocking subtitles Perfect for office desk Tiktok Face Time Zoom video—this is the ultimate kitchen desk essential for phones! Perfect viewing experience while reducing neck back strain, A must-have for gamers streamers desk, and anyone who values both style and support!
- Sleek & Stable Design fits Otterbox Case: Say goodbye to bent cables, tangles, and tip-overs! LISEN’s stylish adjustable desk phone holder features a built-in charging hole and smart cable management, keeping your phone secure and your workspace clutter-free cool gadgets for men
- ANTI-SLIP DESIGN free hands: The under 10.00 items easy gadgets back and the bottom of this kitchen essentials for women are fully covered by anti-skid silicone, which LISEN stand up desk decor can provide maximum protection device from any scratches and slides
- Your Perfect Viewing Companion:If your product arrives damaged or breaks within 365 days, reach out to LISEN for a quick and hassle-free solution. Struggling with assembly, like tightening the screw? We’ve got your back! Your experience matters to us. (Product including: phone Holder stand*1, screw*1, hexagon screwdriver*1, specification*1)
End old sessions before checking revocation
Have Alice start a completely new login session after the removal. Check the groups with id alice, then run a harmless sudo test. An already authenticated sudo session may retain cached credentials for a short period, so terminate the old session when revoking access rather than relying on an existing terminal to prove that the change worked.
Delete a Debian user safely
Delete the account but retain its files
Use the plain command when the account should disappear but its home directory and other files must remain available for an archive, handover or later ownership decision:
sudo deluser aliceThe account entry is removed; retained files may still be owned by the deleted user’s numeric ID. Plan how those files will be archived, reassigned or securely removed rather than assuming account deletion cleans them up.
Delete the account and its home directory
When removal of the user’s personal data is explicitly intended, add --remove-home:
Recommended Free Tools
sudo deluser --remove-home aliceThis removes the account’s home directory and mail spool when present. Treat it as irreversible from the command line: verify the username and make any required backup before running it.
Be cautious with --remove-all-files
--remove-all-files is substantially more destructive than --remove-home. It removes all files on the system owned by that user, not just files below the home directory. Before considering it, inventory files, running processes, scheduled jobs and service dependencies associated with the account. A service account may own data outside its home directory, and deleting those files can stop unrelated workloads.
Handle system accounts deliberately
Debian distinguishes regular local users from system users. If the account is a service identity and deletion is appropriate, use the system-only guard:
Rank #4
- Easy Installation: Our gaming lights have been designed to enhance your entertainment experience. Simply position the led light bar next to your TV or game console to create a game room environment with ease. They come with USB power and a 60 inch cord for direct mounting and mobility
- Audio Syncing & Extensive Mode: The built-in high-sensitivity music sensor allows you to sync the TV led lights to your favorite music. Lights react and move to the beat of music, film and game audio, creating an incredible immersive sound and light experience – and all without the need for an additional hub. You can choose from 64+ patterns, including strobe, illusion, jump, energy, gradient, running, chasing, fluttering mode etc. Each mode can be applied to different scenes
- 64+ Chasing IC+RGB & W Effect: The independent control design of IC+RGB and white all-in-one multifunctional rgbw led bar lights monitor backlight allows you to easily switch the led lights for desk between IC+RGB and white to enjoy a variety of lighting effects, you can choose white lighting mode with high brightness for better illumination when working, etc. Choose IC+RGB lighting mode when you need to create an entertaining atmosphere for the light show, 16 million colours of Color changing rgb light bar let you dance to the beat and create a dynamic party atmosphere
- Dynamic and Dimmable Lights: 1%-full brightness free brightness adjustment gives you the flexibility to adjust dimmable led light bar for room decorations or a variety of occasions
- USB Powered: USB light bars for room can be powered by powernank, usb charger, TV, Monitor, laptop PC mainframe, making behind TV led lighting bar easy to install in any location.TV led lights are powered by the TV usb interface / PC mainframe, can be turned on/off synchronously with TV / PC
sudo deluser --system service_accountConfirm the account’s role first. Removing a service identity without checking its units, files and scheduled work can break a daemon even when the command itself succeeds.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Root cannot be removed
Debian’s deluser refuses to remove the root account. Do not attempt to work around that protection. For any other account, keep an independent administrator session open until you have confirmed that required access and services still work.
Use a sudoers drop-in for least privilege
When a group is too broad
Membership in sudo is appropriate for a fully trusted administrator. It is excessive when a user needs only a defined maintenance command. A sudoers rule can authorize selected commands while leaving the account out of the broad group.
| Decision point | sudo group |
Sudoers drop-in |
|---|---|---|
| Authority | Any command permitted by the default sudo policy. | Only the command and arguments written in the rule. |
| Maintenance | Change group membership with adduser or deluser. |
Edit and validate a policy file with visudo. |
| Auditability | Simple membership check with id. |
Readable, reviewable rule in /etc/sudoers.d/. |
| Compromise impact | Broad administrator access if the account is compromised. | Limited to the commands that the rule safely matches. |
Create and validate a drop-in
Use visudo, not a normal text editor, so syntax is checked before the file is installed:
sudo visudo -f /etc/sudoers.d/alice-maintenanceFor example, a user who must restart one service could receive this rule:
alice ALL=(root) /usr/bin/systemctl restart nginxAdjust the absolute command path and arguments to the real maintenance task. The path must match the executable on the Debian system, and the permitted argument set should be as narrow as the operational need allows. Do not grant the broad sudo group as well unless there is a separate reason to do so.
Files under /etc/sudoers.d/ are local drop-ins. Keeping a local rule separate from the main /etc/sudoers file makes the change easier to review and allows it to survive package-maintainer changes to the main configuration. Continue to use visudo whenever creating or editing the rule.
Best Value
- Compatible with Wide Screens - To ensure compatibility with the dual monitor mount, your each monitor must meet three conditions at the same time: First, computer screens size range: 13 to 32 inches. Second, screen weight range: 4.4 to 19.8 lbs. Third, the back of the monitor screen must have VESA mounting holes with a pitch of 75x75mm or 100x100mm.
- Regarding the compatibility with desks - Your desk must meet three conditions at the same time: First, desk material: Only wooden desks are recommended, plastic or glass desks cannot be used. Second, desk thickness range: 0.59" - 3.54". Third, the bottom of the desk should not have any cross beams or panels, as this will interfere with installation. We recommend carefully checking that your desk and monitors meets all above conditions before purchasing.
- Dual C-Clamp Hold - Worried your dual monitors might wobble or slip? Our upgraded base uses a larger platform plus a dual C-clamp structure to lock the dual monitor arm firmly to your desk. Each arm safely keeps your screens steady while you type, click and game—no shaking, no sliding, just a clean and secure setup you can trust every day. It also provides Grommet Mounting installation choice, both options ensure stable and secure fixation for your 0.59" - 3.54" desk.
- Full-Motion Adjustment For Comfortable View - Pull the screen closer when you’re deep in a spreadsheet, push it back to watch videos, or rotate to portrait for coding — moving everything smoothly with just one hand. The monitor stand offers +85°/-50° tilt, ±90° swivel and 360° rotation. Raise your monitor up to 15.75″ to support a healthy sitting posture. Whether you’re working from home, gaming through the night, or switching between video calls and documents, getting the screens to your natural line of sight helps relieve neck, shoulder and back strain so you can stay focused longer with less fatigue.
- Keep Your Desk Organized: By lifting both screens off the desktop, this dual monitor stand opens up valuable space for your keyboard, notebook, docking station or a simple, clutter-free work area. Built-in cable management guides wires along the arms, keeping cords out of sight and out of the way. Enjoy a tidy, modern workstation that looks as good as it feels to use.
Think carefully before using NOPASSWD: ALL
A rule that permits every command without a password removes an additional authentication check. Debian’s sudo guidance warns that this can make an account compromise much more damaging. Use passwordless execution only when the operational requirement and the resulting compromise risk are understood, and prefer a specific command rule for routine maintenance.
Never delegate a partially restricted deluser
Do not give a non-root account sudo permission to run deluser with supposedly restricted command-line arguments. Debian warns that partial restrictions on deluser are easy to circumvent. A rule intended to remove one named account can often be abused through argument handling or other effects of the command.
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Clear out junk files and repair common Windows errors3Scan for outdated or missing drivers - takes under a minuteIf automation truly requires account removal, use a purpose-built wrapper that accepts a tightly controlled input, performs its own validation and has been reviewed for every side effect. Grant sudo to that wrapper rather than to a broadly capable account-management command.
Troubleshoot common failures
“User is not in the sudoers file” after adding the group
- Confirm the spelling and account entry with
getent passwd alice. - Run
id alicefrom a new login session, not the shell that existed before the group change. - Check that the account is actually listed in the
sudogroup. - Inspect the default sudo policy and any files under
/etc/sudoers.d/if membership is correct but authorization still fails.
The user lost unrelated group access
This usually follows a usermod -G command that omitted -a or failed to list all intended groups. Reconstruct the desired supplementary-group list carefully, then apply it with the append form or the Debian adduser USER GROUP command for individual additions. Start a fresh session and verify with id.
Revoked sudo still appears to work
Check the account from a new login session. Existing sessions can retain group state, and sudo credentials may remain cached briefly. End the old session before judging whether revocation succeeded.
A sudoers edit locked out administrators
Keep the root or known-good administrator session open while editing. If the session is still available, run visudo against the affected file and correct the syntax. This is why direct editing of /etc/sudoers is unsafe: a typo can prevent all subsequent sudo checks from parsing the policy.
Deletion would remove data needed by a service
Stop and inventory the account’s role before using --remove-home or especially --remove-all-files. Check ownership, processes, scheduled jobs and service dependencies. If the data must be retained, use plain deluser first and handle the files separately after confirming the handover plan.
A safe account-lifecycle procedure
- Identify the account with
idandgetent passwd, and determine whether it is a regular or system user. - Keep an independent root or administrator session open.
- Create a normal account with
adduserif one does not exist. - Choose either broad access through the
sudogroup or a command-specific rule under/etc/sudoers.d/. - Validate the result in a fresh login session and confirm only the intended commands work.
- When access must end, remove the
sudogroup membership or the specific sudoers rule before deleting the account. - For deletion, choose plain
deluser,--remove-homeor the more destructive--remove-all-filesonly after checking files and service dependencies.
The practical rule is to match the privilege mechanism to the job: use the sudo group for a trusted administrator who needs full control, and a validated sudoers drop-in when the account should perform only a defined operation. Use Debian’s deluser forms deliberately so revoking privilege, removing a login and erasing data remain separate decisions.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
