Key takeaways
- Set a school laptop up in one order: ask the school, first boot, the accounts, updates, the apps the school asks for, backup, parental limits. These steps describe a Windows laptop; a Chromebook or a Mac needs the same things with different menus.
- Microsoft says it is "safer to have fewer administrators and to use standard user accounts for day-to-day activities": the parent keeps the administrator account, the child gets a standard one.
- The school account cannot be the backup account. Microsoft states that for Windows Backup, "Work or school Microsoft accounts won't work", and a local account has to sign in with a personal Microsoft account instead.
- A free Microsoft account comes with 5 GB of OneDrive storage, into which Windows Backup syncs the Desktop, Documents, Pictures, Videos and Music folders.
- Citzen says the CZ-4's 1-year warranty is auto-registered on order, so you do not register it yourself. Keep the order thread, because the cover runs from the purchase date.
On this page8
What should you do first when you set up a new school laptop in Malaysia?
Work in one order, because each step depends on the one before it. Ask the school which sign-in and which apps it expects, get the machine onto the home Wi-Fi, create the accounts, run every update, install only what the school asked for, switch on backup inside the child's account, and set the parental limits last.
Two of those steps constrain the rest. Windows Backup follows whichever account is signed in, so a backup switched on before the child's account exists protects the wrong profile, and the account type chosen for the child decides whether that backup is possible at all. These steps describe a Windows laptop; a Chromebook or a Mac needs the same things in the same order, with different accounts, backup and parental controls.
- Ask the school which account your child will use, and which apps it expects. Both answers change what you do next.
- At first boot, connect to the home Wi-Fi and set the region, time zone and language.
- Create your own administrator account first, with a password only you know.
- Add a standard account for your child at Settings > Accounts > Other users > Add account; an account's type is changed on the same screen under Account options > Change account type. Use a personal Microsoft account here if you want cloud backup or Microsoft's family limits, because a local-only account cannot use either.
- Run every update through Windows Update, restarting as often as it asks, with the charger plugged in.
- Install only what the school asked for, and bookmark its sign-in page in the child's browser.
- Switch on backup inside your child's account at Settings > Accounts > Windows backup, then test it from another device.
- Set the parental limits on the child's account, and check their own sign-in works before you hand the machine over.
Citzen's WhatsApp hotline handles orders, configuration questions and warranty support on +60 12-565 2091, Monday to Saturday, 9am to 1pm. Still choosing the machine? Our parent's checklist for choosing a school laptop covers the decision before this one, and Citzen's schools and educators page covers what it offers teachers and schools.
Which accounts does a school laptop actually need?
A school laptop usually needs three accounts: an administrator account that belongs to the parent, a standard account that belongs to the child, and whatever account the school issues for classwork. Keeping the three separate is what stops a child installing software, changing security settings, or losing homework inside a parent's files.
Microsoft draws the line plainly: administrators "have complete control over the system" and can "change settings, install software, and access all files", and it is "safer to have fewer administrators and to use standard user accounts for day-to-day activities". A child in a standard account does schoolwork normally; what they cannot do is approve an installation.
The school account is the third, and it behaves differently from the other two. Malaysia's Ministry of Education runs its digital learning through DELIMa; the state broadcaster RTM reported in July 2024 that 26% of students, more than 1.3 million, and 89% of teachers were active on it as of 10 July 2024. Private and international schools often issue their own Google or Microsoft school accounts instead. Whichever it is, the school issues that sign-in rather than the seller, and keeps control of it: Google states that "Google Workspace for Education administrators determine which Google services students can access". Ask the class teacher for the ID before you start.
Why should updates come before any apps?
Updates should come before any apps because an unpatched laptop undoes everything else you set up on it. A machine that has sat in a box has missed every security fix released since it was built. Run Windows Update with the charger plugged in and restart as often as it asks, before installing a single program.
The Windows version matters as much as the patches. Microsoft ended support for Windows 10 on 14 October 2025 and states that it "no longer provides software updates, security fixes, or technical assistance to Windows 10 PCs". A laptop on an unsupported version keeps working and keeps getting less safe, so check which version a new machine runs and which it can update to before the school term depends on it.
What comes after the updates is the school's list, not a shopping list. Install the browser, meeting app and learning platform the school named in step 1, leave Windows Security switched on, and stop there: every extra program is another thing to update.
Which account should the backup use?
The backup must use a personal Microsoft account, not the school one. Microsoft is explicit that for Windows Backup, "Work or school Microsoft accounts won't work", and that a local account has to sign in with a personal Microsoft account instead. A child signed in only with a school ID therefore has no Windows Backup running at all.
Windows Backup covers five folders. Microsoft says backing up folders "syncs the folders you specify to your OneDrive account" — Desktop, Documents, Pictures, Videos and Music, each switched on individually. A free Microsoft account includes 5 GB of OneDrive storage, and Microsoft warns personalisation settings are not backed up when that storage is insufficient. Switch backup on inside the child's own account: one set up in the parent's account protects the parent's files, not the child's homework.
Then prove the backup works. Open one of the child's files from a phone or another computer the same day, because a backup nobody has opened from somewhere else has not been tested.
| What to protect | Where it should live | How to check it worked |
|---|---|---|
| Homework and assignments | A synced folder in the child's personal account, or the school's own drive | Open one file on a phone or another computer |
| Photos of written work | The synced Pictures folder | Watch the free storage figure, not just the file count |
| Account recovery details | Written down away from the laptop | Confirm the recovery phone or email still reaches you |
Which parental settings are worth setting up?
The parental settings worth setting up are the ones you will leave switched on. Screen-time limits, a content filter in the browser and an activity summary cover most of what a parent of a school-age child actually uses. Choose two or three and keep them, rather than ten you switch off within a month.
On Windows, Microsoft's Family Safety lists the ability to "apply screen time limits to devices, apps, and games", web and search content filters, and activity summaries; the child has to be in the parent's Microsoft family group for those to apply, which is why step 4 matters. Google's Family Link is the Chromebook equivalent, and Google notes its site-permission control "may not yet apply on Windows, Mac, or Linux computers".
One limit is worth knowing before you try: parental controls go on the account you created, not on the school's. The school's administrators decide what a school account can reach, so settings you expect to find there may not be yours to change.
What should you keep once the laptop is set up?
Keep three things after setup: the proof of purchase, the serial number and the seller's contact thread, stored somewhere that does not depend on the laptop working. The worst time to look for them is the day the machine will not switch on, and all three take five minutes to save now.
Citzen says the CZ-4 comes with a 1-year (365 days) local warranty beginning from the date of purchase and auto-registered on order, covering malfunctioning components and manufacturing defects; damage from negligence, mishandling or misuse is not covered, and postal costs for claims are borne by the customer. Because Citzen registers it on order, you do not register it yourself — but since the cover runs from the purchase date, the order thread is worth keeping. Our guide to buying a laptop safely on WhatsApp explains what that thread should contain, and keeping a laptop healthy in Malaysia's heat and humidity covers the care that follows setup day.
Citzen's three service centres — Ipoh, Kota Kinabalu and Sibu, open Monday to Saturday, 9am to 5pm — are on the service centres page, and the common questions on its FAQ. Raise anything odd while the laptop is still new: message Citzen on WhatsApp. More guides are on the Guides page.
Frequently asked questions
Do these steps work for a Chromebook or a Mac?
The order holds; the menus do not. A Chromebook or a Mac still needs the school account sorted first, a separate child account, updates, a backup and parental limits, but the Windows paths above exist on neither: Google's Family Link is written for Chromebooks running ChromeOS, while Windows Backup and Microsoft Family Safety are Windows features. Ask the school which it supports before you buy.
Can a child use the school Microsoft account for Windows Backup?
No. Microsoft states that for Windows Backup, "Work or school Microsoft accounts won't work", and that a personal Microsoft account is needed instead, signed in at Settings > Accounts > Windows backup. The school sign-in still works for classwork in the school's own apps; it simply cannot be the account that backs the laptop up.
Can two children share one school laptop?
Yes, by giving each child their own standard account rather than sharing one sign-in. Windows Backup syncs the folders of the account that is signed in, so two accounts keep two separate sets of Documents, Pictures and Desktop files. The parent's administrator account stays separate from both.
What should you test before the first online class?
Test the parts that are awkward to fix with a class waiting: the camera, the microphone, the speakers, the home Wi-Fi in the room the child will actually work in, and a sign-in to the school's meeting app. If a screen in the room is involved, our guide to connecting a laptop to a classroom projector covers that. Do it a day early.
Sources
- Create a local user or administrator account in Windows, Microsoft Support: support.microsoft.com.
- Back up your Windows PC, Microsoft Support: support.microsoft.com.
- Windows 10 end of support, Microsoft: microsoft.com.
- Microsoft Family Safety, Microsoft: microsoft.com.
- Manage your child's Google Account on a Chromebook, Google Families Help: support.google.com.
- DELIMa sokong penguasaan ilmu, perkhidmatan KPM, RTM (31 July 2024): berita.rtm.gov.my.
- Citzen's own published terms on warranty, ordering and service: support, service centres and FAQ.