How to Enable/Disable the Built-in Administrator Account on Windows 10?

As you know, during Windows 10 installation the system prompts creating a user account and grants local administrator privileges to this account. However, during the installation another built-in (hidden) administrator account is created, which is disabled for security reasons. In this article we’ll tell about the built-in Windows 10 Administrator account, what it is used for, how to enable or disable it, and reset the password.

What is Built-in Administrator Account on Windows?

The Administrator account is created automatically during Windows installation and is used to initialize the operating system. This account is then disabled and the user is prompted to create their own account, which is added to the local Administrators group.

The built-in administrator account has full unlimited privileges on a computer. This account is not subject to UAC (User Account Control), and all programs are executed without a UAC prompt (this is an important difference from user accounts with administrator privileges). The built-in Administrator in Windows is somewhat similar to root in Linux – it has maximum rights on the system (not as NT AUTHORITY\SYSTEM, of course, but close ones).

The built-in Administrator is disabled by default in Windows 10 and Windows Server 2016. This account cannot be removed or excluded from the Administrators group.

If you boot Windows in Safe or Recovery Mode, the administrator account is automatically enabled.

Renaming the administrator account somewhat reduces the risks, but the main problem is that its SID doesn’t change. The built-in administrator account always has the well-known SID S-1-5-domain-500 .

How to Enable the Built-in Administrator Account on Windows 10?

Let’s take a look at some simple ways to enable the built-in Administrator account in Windows 10.

The quickest and easiest way to activate the administrator account is from the command prompt (or PowerShell console) running with elevated privileges.

To do this, run the command:

net user administrator /active:yes

Get-LocalUser -Name «Administrator» | Enable-LocalUser

As we said earlier, in modern versions of Windows, there is no password set for the administrator account. If a domain password complexity policy is applied to your computer, you may see the following message when you try to enable the administrator account:

In this case, before enabling the administrator account, you need to set a password for it:

net user administrator *

Don’t use a weak password for the built-in administrator (you can generate it using a simple PowerShell script).

If the previous command returns “ The user name could not be found ”, most likely the administrator account on the computer has been renamed.

You can find out the name of the built-in administrator account on your computer by its known SID (at the end it necessarily contains -500 ). Use the command:

wmic useraccount where «SID like ‘S-1-5-%-500′» get name

In this case, the built-in account has been renamed to admin. To enable it, run:

net user admin /active:yes

In order to list all local accounts:

If you get an “ System error 5 has occurred. Access is denied ” when you try to enable the built-in Windows administrator, make sure that the cmd.exe or powershell.exe console is running as an administrator (elevated). Also check that your account is a member of the local Administrators group.

List the groups your account is member of:

In this example, user1 is not a member of the local Administrators group, and therefore doesn’t have permissions to enable the administrator account.

You can display a list of users in the local administrators group in Windows like this:

net localgroup administrators

In this example, there are only two accounts in the Administrators group. If you don’t know the password for any of them, then you don’t have administrator rights on the computer. To enable the built-in administrator account and grant your user account local admin permissions, see the next section of the article

Open the MMC snap-in Local Users and Groups by entering lusrmgr.msc in the search bar or in the command prompt. In the console window, expand the Users section. Find the account named Administrator and double-click it, then uncheck Account is Disabled. Save the changes.

The administrator account is now enabled. You can change its password in this console by selecting Set Password option in the context menu.

You can enable the built-in administrator account through the local GPO. Open the Local Group Policy Editor gpedit.msc (or Local Security Policy Editor — secpol.msc ). Go to Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> Security Options. Find Accounts: Administrator account status policy and set it to Enable.

Update the Group Policy settings with the command: gpupdate /force or just reboot your computer.

After enabling the administrator account in any of the above ways, it will be displayed on the Windows logon screen.

To disable the built-in administrator account, use the command

net user administrator /active:no

If you enabled the built-in Administrator through the Accounts: Administrator account status policy, you will have to disable it (or completely reset all local GPO settings).

Lost Administrator Privileges (Password) on Windows 10

There are situations when you have accidentally disabled your user account with administrator privileges or removed your account from local admins group. Let’s look on how to enable the built-in Administrator or add your account to the local Administrators group (even if you can’t logon Windows).

You need to boot your computer from a LiveCD (but not an MSDaRT recovery image) or a Windows 10 install media. The easiest way to create a bootable USB stick with a Windows 10 install image is using the Media Creation Tool.

Press Shift + F10 on the Windows Setup screen. A command prompt will open.

Now you need to determine which drive your Windows is installed on. Run diskpart and enter list vol . In my example, you see that Windows is located on the C: drive. This is the drive letter I will use in the following commands. Type exit to close the diskpart session.

Run the following commands to create a copy of utilman.exe (Ease of Access applet) and replace it with the executable cmd.exe:
copy c:\windows\System32\utilman.exe c:\
copy c:\windows\System32\cmd.exe c:\windows\System32\utilman.exe

Reboot your computer:

Boot Windows normally. On the Windows login screen (with a list of accounts), press the Win + U keys combination.

A command prompt window will open with System privileges. To add your account to the local Administrators group, enable the built-in Windows administrator and reset its password, run the commands:

net localgroup administrators user1 /add
net user Administrator /active:yes
net user administrator *

Now you can logon Windows under built-in Administrator or your user account, which has been assigned the local administrator permissions.

Enable or Disable the Built-in Administrator Account in Windows 10

Windows 10 includes a hidden Administrator account you can use to manage all the resources of the computer. In previous versions of Windows, such as Windows XP, this account was readily available when you set up your computer for the first time. Starting with Windows Vista, the built-in administrator account is disabled by default. In this article, we’ll take a look at how you can enable this built-in administrator account in Windows 10 and why you may or may not want to.

How to Enable the Built-in Administrator Account in Windows 10

There are two ways to enable the built-in administrator account. The easiest method is from within Computer Management.

Note: Computer Management is only available in Windows 10 Pro. Use the Command Prompt instructions below for Windows 10 Home.

Right-click the Start menu (or press Windows key + X) > Computer Management, then expand Local Users and Groups > Users.

Select the Administrator account, right click on it then click Properties. Uncheck Account is disabled, click Apply then OK.

Enable Built-in Administrator from Command Prompt (Windows 10 Home)

The command line can also be used to enable and disable the administrator account.

Open Start, type: CMD, right-click Command Prompt then click Run as administrator.

Type the following command and press Enter:

net user administrator /active:yes

To disable it, type the following command and press Enter:

Disabling it is just as easy, type net user administrator /active:no

What’s the Built-in Administrator Account for?

Explaining how to enable the built-in administrator account in Windows 10 is a lot easier than explaining why you would want to. Simply put, unless you know why you want to use the built-in administrator account, you probably don’t need it. In fact, you should probably leave it disabled—the built-in administrator account has free rein across your entire system which makes it a security vulnerability. But more to the point, there’s practically nothing that the built-in administrator account can do that a standard Windows 10 administrator account can’t do. When you first set up and configure Windows 10, the first account you create will be an administrator account.

If you’ve accidentally demoted, locked out, or forgotten the password to your administrator account, using the built-in administrator account may be your saving grace, but only if you’ve already enabled it beforehand since you need administrative privileges to enable or disable it. If that’s the purpose you’re using it for, you’re still better off creating a separate standard administrator account, rather than using the widely-known and abused built-in administrator account.

So, why does the built-in administrator account exist in the first place? It’s mostly for OEM system builders, who may want to make tweaks to the system before the out-of-box-experience is complete. If that’s not you, then you’ll be hard-pressed to find a reason to ever use the built-in administrator account.

How to Enable, Disable Administrator Account in Windows 10

1. Download Restoro PC Repair Tool that comes with Patented Technologies (patent available here).
2. Click Start Scan to find Windows issues that could be causing PC problems.
3. Click Repair All to fix issues affecting your computer’s security and performance

• Restoro has been downloaded by 0 readers this month.

Every Windows operating system has an administrator level account. This administrator account is hidden or disabled by default. Do you want to enable the Administrator account in Windows 10 and you don’t have any clue how to do that?

In Windows 10, applications and tasks always run in the security context of a regular user account, unless an administrator specifically authorizes access level to the operating system. This way, it helps prevent malicious programs (for example: malwares) from damaging a system. Below, you can find a quick and easy guide for enabling or disabling administrator account in Windows 10.

How to enable the Administrator account in Windows 10:

1. Open the “Power Users” menu by pressing “ Win + X” shortcut keys (in the same time) from the keyboard;
2. Drag your mouse pointer over the “Command Prompt (Admin)” feature;
3. Left click on it and you can observe that the cmd.exe will open;
4. Type the following command: “net user administrator /active: yes”, but without quotes;
5. You need to sign out from the current user account;
6. Observe that an “Administrator” account showed up on the log on screen.

How to disable the Administrator account in Windows 10:

1. Open the “Power Users” menu by pressing “Win + X” shortcut keys (in the same time) from the keyboard;
2. Drag your mouse pointer over the “Command Prompt (Admin)” feature;
3. Left click on it and you can observe that the cmd.exe will open;
4. Type the following command: “net user administrator /active: no”, but without quotes;
5. The Administrator account will be disabled again.

Well, I hope that the method described above will help you to enable or disable the admin account in Windows 10. Feel free to leave a comment below.