Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Built-in Administrator Account - Enable or Disable

Built-in Administrator Account - Enable or Disable

How to Enable or Disable the Built-in Administrator Account in Windows 7
Published by Brink
14 Nov 2008
Published by

How to Enable or Disable the Built-in Elevated Administrator Account in Windows 7


information   Information
This tutorial will show you how to enable or disable the built-in elevated Administrator account in Windows 7.

Note   Note
Standard user (Users) - The standard account is an unelevated restricted users account. It can help protect your computer by preventing users from making changes that affect everyone who uses the computer, such as deleting files that are required for the computer to work. It is recommend to create a standard account for each user instead of an administrator account for the user. When you are logged on to Windows with a standard account, you can do almost anything that you can do with an administrator account, but if a standard user wanted to do something that requires elevated rights that affects other users of the computer, such as installing software or changing security settings, Windows will give the standard user a UAC prompt to enter the password of an administrator account for approval and confirmation before allowing the action.

administrator user - Is an unelevated administrator account that is created by default during the installation of Windows 7, or is already setup or you on a OEM (ex: Dell) computer. An administrator account has complete access to the computer, and can make any desired changes. To help make the computer more secure, this administrator account type will be prompted by UAC by default to give confirmation before allowed to make any changes that require elevated administrator rights. Such as those that affect the system, other users, or when running anything elevated (Run as Administrator) since running elevated will allow it to have access to the entire computer.

Built-in "Administrator" - Is the hidden elevated administrator account that has full unrestricted access rights and permission on the computer. By default, this elevated "Administrator" account is not prompted by UAC by default to provide confirmation before allowed to make any changes that require elevated administrator permissions since it is an elevated account.

warning   Warning
If you enable the built-in Administrator account, then it is recommended to create a password for better security.

For additional security purposes, it is also not recommended to leave the built-in Administrator account always enabled, or to use it for everyday purposes.






OPTION ONE
Enable built-in Administrator in Local Users and Groups

NOTE: This option will only be available in the Windows 7 Professional, Ultimate, and Enterprise editions.
1. Open the Local Users and Groups manager.

2. In the left pane, click on the Users folder. (See screenshot below step 3)

3. In the middle pane, right click on Administrator and click on Properties. (See screenshot below)
Built-in Administrator Account - Enable or Disable-local_users_and_group.jpg
4. To Enable the Built-in Elevated Administrator Account
A) Uncheck the Account is disabled box. (See screenshot below step 6)

B) Go to step 6.
5. To Disable the Built-in Elevated Administrator Account
NOTE: This is the default setting.
A) Check the Account is disabled box. (See screenshot below step 6)
6. Click on OK. (See screenshot below)
Name:  Properties.jpg
Views: 458241
Size:  78.9 KB
7. Close the Local Users and Groups window. (See screenshot below step 3)

8. Log off, and you will now see the built-in Administrator account log on icon added (enabled) or removed (disabled) from the log on screen. (See screeenshot below)
NOTE: Click on the Administrator icon to log on to the built-in Administrator account.
Built-in Administrator Account - Enable or Disable-log-.jpg



OPTION TWO
Enable built-in Administrator in an Elevated Command Prompt

NOTE: This option can be used in all editions of Windows 7. If your Windows 7 uses another language than English, then you may need to translate the word administrator part of the commands below to your language to use instead.
1. Open an elevated command prompt.

2. To Enable the Hidden Built-in Elevated Administrator Account
A) In the elevated command prompt, copy and paste the command below and press Enter. (See screenshot below)
NOTE: If you had previously renamed the built-in "Administrator" account's name, then you will need to substitute administrator in the command below with the new name instead.
net user administrator /active:yes
Name:  Command_Enable.jpg
Views: 504736
Size:  53.8 KB
B) Go to step 4.
3. To Disable the Hidden Built-in Elevated Administrator Account
NOTE: This is the default setting.
A) In the elevated command prompt, copy and paste the command below and press Enter. (See screenshot below)
NOTE: If you had previously renamed the built-in "Administrator" account's name, then you will need to substitute administrator in the command below with the new name instead.
net user administrator /active:no

Name:  Command_Disable.jpg
Views: 470384
Size:  53.9 KB
4. Close the elevated command prompt.

5. Log off, and you will now see the built-in Administrator account log on icon added (enabled) or removed (disabled) from the log on screen. (See screeenshot below)
NOTE: Click on the Administrator icon to log on to the built-in Administrator account.
Click image for larger version

Name:	Log-on.jpg
Views:	27697
Size:	148.3 KB
ID:	563



OPTION THREE
Enable built-in Administrator in Local Security Policy

NOTE: This option will only be available in the Windows 7 Professional, Ultimate, and Enterprise editions.
1. Open the Local Security Policy editor.

2. In the left pane, expand Local Policies, and click on Security Options. (See screenshot below)
Built-in Administrator Account - Enable or Disable-secpol-1.jpg
3. In the right pane, right click on Accounts: Administrator account status and click on Properties. (See screenshot above)

4. To Enable the Hidden Built-in Elevated Administrator Account
A) Select (dot) Enabled. (See screenshot below step 6)

B) Go to step 6.
5. To Disable the Hidden Built-in Elevated Administrator Account
NOTE: This is the default setting.
A) Select (dot) Disabled. (See screenshot below step 6)
6. Click on OK. (See screenshot below)
Name:  Secpol-2.jpg
Views: 441087
Size:  58.4 KB
7. Close the Local Security Policy window. (See screenshot below step 2)

8. Log off, and you will now see the built-in Administrator account log on icon added (enabled) or removed (disabled) from the log on screen. (See screeenshot below)
NOTE: Click on the Administrator icon to log on to the built-in Administrator account.
Click image for larger version

Name:	Log-on.jpg
Views:	27697
Size:	148.3 KB
ID:	563



OPTION FOUR
Enable built-in Administrator from System Recovery (WinRE) at Boot
1. For how, see: How to Enable the Built-in Administrator Account from WinRE
That's it,
Shawn








14 Jan 2009   #1
uwe

windows 7 - 32
 
 

this information has been very helpful - thank you!

My System SpecsSystem Spec
14 Jan 2009   #2
davehc
Microsoft MVP

Vista and now 7 in 32 and 64 bit.
 
 

Fwiw. You do not need the "yes" to enable, but do need "no" to disable.

You can also, instead of lusrmgr.msc , type Control userpasswords2 , but it comes to the same window, and is more keystrokes
My System SpecsSystem Spec
14 Jan 2009   #3
Brink
Microsoft MVP

64-bit Windows 8.1 Enterprise
 
 

Thank you for the addition Dave. It has been added.
My System SpecsSystem Spec
.


14 Jan 2009   #4
Brink
Microsoft MVP

64-bit Windows 8.1 Enterprise
 
 

Quote   Quote: Originally Posted by uwe View Post
this information has been very helpful - thank you!
You're welcome uwe.
My System SpecsSystem Spec
16 Jan 2009   #5
vaultboy

Windows 7
 
 

Option two doesn't work:]

cmd -> run as administrator
net user administrator /active:yes

"System error 5 has occurred. Access is denied"
My System SpecsSystem Spec
16 Jan 2009   #6
Brink
Microsoft MVP

64-bit Windows 8.1 Enterprise
 
 

Hello Vaultboy, and welcome to Seven Forums.

It works, but you must open a elevated command prompt instead as in step 1.
My System SpecsSystem Spec
20 Feb 2009   #7
robcardiv

Well its not POS Vista lol : )
 
 

Quote   Quote: Originally Posted by vaultboy View Post
Option two doesn't work:]

cmd -> run as administrator
net user administrator /active:yes

"System error 5 has occurred. Access is denied"

When I run CMD and type

NET USER ADMINISTRATOR /ACTIVE:YES

I get the same error message.


"System error 5 has occurred. Access is denied"[/quote]
My System SpecsSystem Spec
20 Feb 2009   #8
darkassain

Windows 7 Ult x64(x2), HomePrem x32(x4), Server 08 (+VM), 08 R2 (VM) , SuSe 11.2 (VM), XP 32 (VM)
 
 

Quote   Quote: Originally Posted by robcardiv View Post
When I run CMD and type

NET USER ADMINISTRATOR /ACTIVE:YES

I get the same error message.


"System error 5 has occurred. Access is denied"
try to get a elevated command prompt first before attempting this route
My System SpecsSystem Spec
05 Mar 2009   #9
swarfega

Windows 7 Professional 64-bit
 
 

"NOTE: You could also type Control userpasswords2 instead if you like since it takes you to the same window under step 4." I think the wording needs clarification. Its not good grammar.
My System SpecsSystem Spec
Comment

 Built-in Administrator Account - Enable or Disable




Tutorial Tools



Similar help and support threads for2: Built-in Administrator Account - Enable or Disable
Windows 7 Tutorial Category
Built-in Administrator - Enable from WinRE Tutorials
Built in administrator account at log in General Discussion
Windows XP Mode - Enable Built-in Administrator Account Tutorials
Solved How do I repair the built-in Administrator account ? General Discussion
Built-in Administrator Account - Change Name Tutorials
Solved Built-In Administrator Account Installation & Setup
Rename built in administrator account? Customization

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 05:38 PM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33