It is recommended to disable local accounts for the non-domain mode to ensure security.
To disable local accounts, perform the following steps:
Open the file C:\Program Data\NetIQ\Windows Client\config.properties. If the file does not exist, create a new file.
Add a line disable_local_accounts: true to the file.
If you do not disable the local accounts for a non-domain mode, it is possible to unlock the operating system and change the password using a local account with password authentication (one factor). This can lead to security issues.