Posted on December 29, 2015 · Posted in Windows 10

Enable Built-in Administrator account in Windows 10

As you know, during Windows 10 installation the system prompts creating a user account and gives local administrator privileges to this account. However, during the installation another built-in (hidden) administrator account is created, which is disabled for security reasons. In this article we’ll tell about the built-in Windows 10 administrator account, what it is used for, how to enable and block it.

Still in Windows XP, an administrator account was hidden from the logon screen, and starting from Windows Vista to Windows 10 it also gets blocked. A built-in administrator account has full unlimited privileges on a computer, the UAC (User Account Control) has no influence on it, and all apps run without UAC permission. (This is what is its difference from user accounts with the administrator privileges.)

Important. It’s better to enable the Administrator account only in case of emergency to perform a certain task or troubleshooting. It is not recommended to keep this account active or constantly work under it.

We have considered several ways to enable the built-in administrator account in Windows 10.

Tip. By default, the Administrator password is not set (empty).

Command Prompt

It is faster and easier to enable the administrator account from the elevated command prompt.

To do it, run this command:

net user administrator /active:yes

net user administrator /active:yes

Tip. If the command returns that the name is not found, the administrator account is renamed. You can display the list of all accounts using the command:

net user

By default, this account doesn’t have a password (empty password), so it is highly recommended to change it to a stronger one. You can set the password using the following command (you will have to enter it twice):
net user administrator *

set administrator password

Note. This way to activate the built-in administrator account works in all Windows 10 versions. However, the techniques considered below are not applicable to home editions of Windows 10 without the Computer and Local Security Policy Management snap-in.

Local Users and Groups Snap-In

Open the MMC snap-in Local Users and Groups  by entering lusrmgr.msc in the search bar or in the command prompt. In the console window, expand Users section. Find the account named Administrator and double-click it, then uncheck Account is Disabled. Save the changes.  windows 10 enable built-in admin

The administrator account is now enabled. You can change its password in this console having selected Set Password option in the context menu.

Local Policy Editor

Open the Local Group Policy Editor gpedit.msc (or Local Security Policy Editor — secpol.msc). Go to Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> Security Options. Find Accounts: Administrator account status policy and edit it by checking Enable.

Accounts: Administrator account status policy

After the administrator account is enabled by any of the ways described above, it will be available on the logon screen.

You can disable the administrator account doing the same in the reverse order. It is easier to do it from the command prompt:
net user administrator /active:no

Related Articles