Windows 11 includes a hidden Administrator account with full system privileges. Unlike a regular administrator account, it runs with elevated privileges by default, useful for advanced troubleshooting, recovering a PC, or managing system settings. For security reasons, Microsoft keeps the built-in Administrator account disabled by default to help protect your PC from unauthorized access and malware. However, there are times when you may need to enable it, such as troubleshooting account problems, fixing permission issues, or recovering access to your computer. In this guide, you’ll learn how to enable or disable the built-in Administrator account in Windows 11. We’ll also explain when it’s safe to use this account and why you should disable it again after you’re finished.
What Is the Built-in Administrator Account?
The built-in Administrator account is a special local account with unrestricted access to Windows. Unlike a regular administrator account, it runs with elevated permissions by default, allowing it to perform tasks that may require additional approval from other administrator accounts.
In most cases, you don’t need to use this account for everyday computing. It’s primarily intended for troubleshooting, system recovery, and advanced administrative tasks. Because it has full control over the PC, Microsoft disables it by default to reduce security risks.
You may need to enable the built-in Administrator account if:
- You can’t access your regular administrator account.
- You need to troubleshoot permission or user account issues.
- You’re performing advanced system maintenance or recovery.
- You’re managing a PC in a testing or IT environment.
Note: The built-in Administrator account is different from a standard user account with administrator privileges. Even if your account is an administrator, some actions still require User Account Control (UAC) confirmation, whereas the built-in Administrator account generally bypasses those prompts.
Method 1: Enable the Built-in Administrator Account Using Command Prompt
The easiest and most common way to enable the built-in Administrator account is by using the net user command in an elevated Command Prompt. This method works on both Windows 11 and Windows 10 and only takes a few seconds.
- Press Windows, type Command Prompt, then select Run as administrator.
- If prompted by User Account Control, click Yes.
- Type the following command and press Enter:
net user administrator /active:yes
- You should see the message:
The command completed successfully.
5. (Recommended) Set a password for the Administrator account by running:
net user administrator Password123
6. Sign out of your current account or restart your PC. The Administrator account will now appear on the sign-in screen.
To Disable the Built-in Administrator Account
After you’ve finished troubleshooting or performing administrative tasks, it’s recommended to disable the built-in Administrator account again. You can disable it by running:
net user administrator /active:no
Note: Disabling the account doesn’t delete it or affect any other user accounts. It simply hides the built-in Administrator account from the sign-in screen until you enable it again.
Method 2: Enable or Disable the Built-in Administrator Account Using PowerShell
If you prefer PowerShell, you can use it to enable or disable the built-in Administrator account. Make sure to open Windows PowerShell or Terminal as an administrator before running these commands.
- Press Windows, search for PowerShell or Windows Terminal, then select Run as administrator.
- Click Yes if prompted by User Account Control (UAC).
Run the following command:
Enable-LocalUser -Name "Administrator"
- Once the command completes successfully, sign out or restart your PC. The Administrator account will appear on the sign-in screen.
Disable the Administrator Account
To disable the account again, run:
Disable-LocalUser -Name "Administrator"
After restarting or signing out, the built-in Administrator account will no longer appear on the sign-in screen.
Note: If these commands don’t work on your PC, use the Command Prompt method instead.
Method 3: Enable the Built-in Administrator Account Using Computer Management
If you’re using Windows 11 Pro, Enterprise, or Education (Read how to check Windows edition), you can enable the built-in Administrator account through the Local Users and Groups console in Computer Management.
Note: This method isn’t available in Windows 11 Home.
- Press Windows + X and select Computer Management.
- In the left pane, expand System Tools > Local Users and Groups > Users.
- Double-click the Administrator account.
- On the General tab, clear the “Account is disabled” checkbox.
- Click Apply, then OK.
- Sign out or restart your PC. The Administrator account will appear on the sign-in screen.
Disable the Built-in Administrator Account
To disable the account again, repeat the steps and select the “Account is disabled” checkbox, then click Apply and OK.
Tip: If you don’t see Local Users and Groups in Computer Management, you’re likely using Windows 11 Home. Use the Command Prompt or PowerShell method instead.
Method 4: Enable the Built-in Administrator Account Using Local Security Policy
If you’re using Windows 11 Pro, Enterprise, or Education, you can also enable the built-in Administrator account through the Local Security Policy editor.
Note: Local Security Policy isn’t available in Windows 11 Home.
- Press Windows + R, type secpol.msc, and press Enter.
- In the left pane, navigate to: Local Policies > Security Options.
- In the right pane, double-click Accounts: Administrator account status.
- Select Enabled.
- Click Apply, then OK.
- Sign out or restart your computer. The Administrator account will now appear on the sign-in screen.
Disable the Built-in Administrator Account
When you no longer need the account, follow the same steps and change Accounts: Administrator account status to Disabled.
Tip: If you’re using Windows 11 Home, this policy isn’t available. Use the Command Prompt method instead, as it works on all supported editions of Windows 11.
Final Thoughts
The built-in Administrator account is a powerful troubleshooting tool that can help you recover access to Windows, resolve permission problems, and perform advanced administrative tasks. While it’s useful in specific situations, it shouldn’t be used as your everyday account because of its unrestricted access to the system.
Frequently Asked Questions
A regular administrator account can install software, change settings, and manage other users, but many system-level tasks still require User Account Control (UAC) approval. The built-in Administrator account has elevated permissions by default and typically doesn’t display UAC prompts, making it suitable for advanced troubleshooting and system recovery.
Microsoft disables the built-in Administrator account to improve security. Because it has unrestricted access to the operating system, leaving it enabled can increase the risk of unauthorized access or malware making system-wide changes.
It’s best to enable the account only when you need it. After completing your task, disable it again to reduce security risks. If you keep the account enabled, make sure it’s protected with a strong password.
No. The built-in Administrator account is a permanent part of Windows and can’t be deleted. However, you can disable it so it no longer appears on the sign-in screen.
This error usually means Command Prompt or PowerShell wasn’t opened with administrator privileges. Close the window, reopen Command Prompt or Windows Terminal using Run as administrator, then try the command again.
