Built-in Administrator Account - Enable or Disable in Windows 8

How to Enable or Disable Built-in Elevated "Administrator" Account Windows 8 and 8.1

This tutorial will show you how to enable or disable the hidden built-in elevated Administrator account in Windows 8, Windows RT, Windows 8.1, and Windows RT 8.1.

You must be signed in as an administrator to be able to do the steps in this tutorial.

Note   Note
Standard user (Users) - The standard account is an unelevated restricted user account then can be a local account or Microsoft account. It can help protect your computer by preventing users from making changes that affect everyone who uses the computer, such as deleting files that are required for the computer to work. It is recommend to create a standard account for each user instead of an administrator account for the user. When you are logged on to Windows with a standard account, you can do almost anything that you can do with an administrator account, but if a standard user wanted to do something that requires elevated rights that affects other users of the computer, such as installing software or changing security settings, Windows will give the standard user a UAC prompt to enter the password of an administrator account for approval and confirmation before allowing the action.

administrator user - Is an unelevated administrator account that is created by default during the installation of Windows 8 or 8.1, or is already setup for you on a OEM (ex: Dell) computer. This account can be a local account or Microsoft account. An administrator account has complete access to the computer, and can make any desired changes. To help make the computer more secure, this administrator account type will be prompted by UAC by default to give confirmation before allowed to make any changes that require elevated administrator rights. Such as those that affect the system, other users, or when running anything elevated (Run as Administrator) since running elevated will allow it to have access to the entire computer.

Built-in "Administrator" - Is the hidden elevated local administrator account that has full unrestricted access rights and permission on the computer. By default, this elevated "Administrator" account is not prompted by UAC by default to provide confirmation before allowed to make any changes that require elevated administrator permissions since it is an elevated account.

warning   Warning

  • You will not be able to open and run modern Store apps while signed in to the built-in Administrator account.
  • The built-in Administrator account is a local account that cannot be switched to a Microsoft account.
  • The built-in Administrator account's C:\Users\Administrator folder will not be created until the first time that it is signed into.
  • If you enable the built-in Administrator account, it is recommended that you create a password for it to help prevent unauthorized access of it.
  • For better security purposes, it is not recommended to leave the built-in Administrator account always enabled, or used for everyday purposes. The built-in Administrator account should only be used as needed instead.


EXAMPLE: Built-in "Administrator" Account Enabled in Windows 8
NOTE: This is for the Sign in screen and Switch User. If you do not see an option to select another user account at sign in, then click/tap on the back arrow button.

Sign-in.jpg
Switch_User.jpg






OPTION ONE

To Enable or Disable Built-in Administrator in Command Prompt



1. Open an elevated command prompt, and do either step 2 or 3 below for what you would like to do.

2. To Enable the Built-in Administrator Account in Windows 8

A) In the elevated command prompt, copy and paste the command below and press Enter, then go to step 4 below. (see screenshot below)

Note   Note
If you had previously renamed the built-in "Administrator" account's name, then you will need to substitute administrator in the command below with the new name instead.

If your Windows uses a different language than English, then you would need to substitute administrator in the command below with the translation for your language instead.





net user administrator /active:yes


CMD_Yes.jpg


3. To Disable the Built-in Administrator Account in Windows 8

A) In the elevated command prompt, copy and paste the command below and press Enter, then go to step 4 below. (see screenshot below)

Note   Note
If you had previously renamed the built-in "Administrator" account's name, then you will need to substitute administrator in the command below with the new name instead.

If your Windows uses a different language than English, then you would need to substitute administrator in the command below with the translation for your language instead.





net user administrator /active:no


CMD_No.jpg



4. Close the elevated command prompt.

5. The built-in Administrator will now be available to select to sign into.






OPTION TWO

To Enable or Disable Built-in Administrator in Command Prompt at Boot


NOTE: This option is great for when you are unable to sign in to Windows 8.

1. Open a command prompt at boot.

2. In the command prompt, type regedit and press Enter. (see screenshot below step 3)

3. In the left pane of Registry Editor, click/tap on the HKEY_LOCAL_MACHINE key. (see screenshot below)

boot-1.jpg

4. Click/tap on File (menu bar) and on Load Hive. (see screenshot below)

boot-2.jpg

5. Open the drive (ex: D ) that you have Windows 8 installed on, and browse to the location below. (see screenshot below)
NOTE: The drive letter (ex: C) will not always be the same as it is from within Windows 8.

D:\Windows\System32\config


boot-3.jpg

6. Select the SAM file, and click/tap on Open. (see screenshot below)

boot-4.jpg

7. In the Load Hive dialog, type REM_SAM and click/tap on OK. (see screenshot below)

boot-5.jpg

8. In the left of Registry Editor, navigate to and open the key below. (see screenshot below)


HKEY_LOCAL_MACHINE\REM_SAM\SAM\Domains\Accounts\Users\000001F4


boot-6.jpg

9. In the right pane of 000001F4, double click/tap on F to modify it. (see screenshot above)


10. Do step 11 or 12 below for what you would like to do.


11. To Enable the Built-in Administrator Account in Windows 8

A) In the 2nd column and 8th row, change 11 to 10, click/tap on OK, and go to step 13 below. (see screenshot below)
NOTE: You would do this by clicking to the left of 11 to place the cursor there, press the Delete key, then type 10.

boot-8-enabled.jpg


12. To Disable the Built-in Administrator Account in Windows 8

A) In the 2nd column and 8th row, change 10 to 11, click/tap on OK, and go to step 13 below. (see screenshot below)
NOTE: You would do this by clicking to the left of 10 to place the cursor there, press the Delete key, then type 11.

boot-7-disabled.jpg


13. Close Registry Editor and the command prompt. (see screenshot below step 3)

14. Click/tap on Continue to Windows 8, or restart the computer. (see screenshot below)

boot-9.jpg


16. The built-in Administrator will now be available to select to sign into.






OPTION THREE

To Enable or Disable Built-in Administrator in Local Users and Groups


NOTE: This option is only available in the Windows 8/8.1 Pro and Windows 8/8.1 Enterprise editions.

1. Press the Windows + R keys to open the Run dialog, type lusrmgr.msc and click/tap on OK.

2. In the left pane, click/tap on the Users folder, then in the middle pane, double click/tap on Administrator. (see sceenshot below)

lusrmgr.msc-1.jpg

3. Do step 4 or 5 below for what you would like to do. (see sceenshot below)

lusrmgr.msc-2.jpg


4. To Enable the Built-in Administrator Account in Windows 8

A) Uncheck the Account is disabled box, click/tap on OK, and go to step 6 below. (see screenshot below step 3)

5. To Disable the Built-in Administrator Account in Windows 8

A) Check the Account is disabled box, click/tap on OK, and go to step 6 below. (see screenshot below step 3)

6. Close the Local Users and Groups window. (see screenshot below step 2)

7. The built-in Administrator will now be available to select to sign into.





OPTION FOUR

To Enable or Disable Built-in Administrator in Local Security Policy


NOTE: This option is only available in the Windows 8/8.1 Pro and Windows 8/8.1 Enterprise editions.

1. Press the Windows + R keys to open the Run dialog, type secpol.msc and click/tap on OK.

2. In the left pane, click/tap on the Local Policies folder to expand it, and click/tap on the Security Options folder. (see screenshot below)


secpol.msc-1.jpg

3. In the right pane of Security Options, double click/tap on Accounts: Administrator account status. (see screenshot above)

4. Do step 5 or 6 below for what you would like to do. (see sceenshot below)


secpol.msc-2.jpg

5. To Enable the Built-in Administrator Account in Windows 8

A) Select (dot) Enabled, click/tap on OK, and go to step 7 below. (see screenshot below step 4)


6. To Disable the Built-in Administrator Account in Windows 8

A) Select (dot) Disabled, click/tap on OK, and go to step 7 below. (see screenshot below step 4)



7. Close the Local Security Policy window. (see screenshot below step 2)

8. The built-in Administrator will now be available to select to sign into.





That's it,
Shawn


 

Attachments

  • Advanced_User_Accounts.png
    Advanced_User_Accounts.png
    15.7 KB · Views: 546
Last edited by a moderator:
Hello Guiri,

While trying to boot to a command prompt at boot, you would have to first select and enter a password for any local administrator account on the PC to be able to. Afterwards, you'll be able to follow this tutorial to enable the built-in Administrator.

Hope this helps. :)
 
OK, thanks for the clarification, but I imagine that if the 'normal' administrative account cannot log in to Windows, it will not be possible to boot to a command prompt with that same ID and password either?

In other words: it's best to activate that administer account before any problems with the normal account happen?
 
It depends on what the issue is with the normal administrator, but it certainly is possibly to not be able to use it's password if the user account is corrupted.

It would indeed be best to enable the built-in Administrator before you have any problems to make sure you will have it available if needed. In addition, I would recommend to rename the built-in "Administrator" before enabling it, and after enabling it to create a strong password for it to prevent others from being able to sign-in to it.
 
EXCELLENT article! I had spent hours trying to sort this problem out and made the mistake of first looking at the Microsoft website which turned out to be useless. Linking my user account to my Microsoft Live account meant that the only activated administrator account on my PC was deactivated! Not sure why there is not a warning that admin accounts are automatically changed to a standard account (or I missed the message) when this is done. A number of other problems are now fixed or explained. Thanks for your help.
 
Hello Benjamin,

Please provide some more details about your situation and how and what you are trying to do to see what we may be able to do to help. :)
 
i am unable to unlock-enable my 'built-in administrator account.
i have win 8. i don't think it is Pro. it is mentioned as windows 8 single language.

so, i cannot access lsurmgr.

i couldn't use the command prompt method too, using net user administrator /active:yes
the message i got was: 'user name could not be found'


when i tried to use the registry change method, i couldnot load the hive.
on selecting the file SAM, the message that came was 'this file is in use' ....

so, what do i do NOW?
could you help please ?

regards
biren
 
i am unable to unlock-enable my 'built-in administrator account.
i have win 8. i don't think it is Pro. it is mentioned as windows 8 single language.

so, i cannot access lsurmgr.

i couldn't use the command prompt method too, using net user administrator /active:yes
the message i got was: 'user name could not be found'


when i tried to use the registry change method, i couldnot load the hive.
on selecting the file SAM, the message that came was 'this file is in use' ....

so, what do i do NOW?
could you help please ?

regards
biren

Hello Biren, and welcome to Eight Forums. :)

What accounts does it show in Control Panel -> User Accounts -> Manage another account?

Please go ahead and post a screenshot of the elevated command prompt using the net user administrator /active:yes command to see if something may stand out.

http://www.eightforums.com/tutorials/2598-screenshots-files-upload-post-eight-forums.html
 
Last edited:
thank you, dear brink.

here is the snip for user accounts:


and the snip of of elevated cmd window:

Capture2.JPG
 
Last edited by a moderator:
Biren,

Is the is an OEM computer or one you installed yourself, and are you joined to a domain?

The built-in "Administrator" may have been renamed. Type the command below in the command prompt to show all local administrator accounts to see of "Administrator" may be listed. I don't think it will since it's not listed above with net user. Compare the results from the command below to see if one is not listed with the accounts you have listed in Control Panel. That may be the renamed built-in Administrator.


net localgroup administrators
 
Biren,

Is the is an OEM computer or one you installed yourself, and are you joined to a domain?

The built-in "Administrator" may have been renamed. Type the command below in the command prompt to show all local administrator accounts to see of "Administrator" may be listed. I don't think it will since it's not listed above with net user. Compare the results from the command below to see if one is not listed with the accounts you have listed in Control Panel. That may be the renamed built-in Administrator.


net localgroup administrators


dear Brink.
thank you once again. that was quite fast. :)

i have a OEM laptop - dell with windows preinstalled, bought thru a reseller.

the cmd prompt lists 2 administrator accounts, and both this show up in the user account (snip below).

** REMOVED **

also...
when i access these accounts (log in thru), i see the apps in both cases, on the start screen. (i think, you mentioned that apps are not accessible in the built-in admin account)

regards
biren
 
Last edited by a moderator:
You'll still see some apps while signed in to the built-in Administrator. You'll just see something like this below if you try to open any of them though. Test to see if this happens while signed in to either your "biroo" or "biren-boss" local administrator accounts. If you do, then that's the built-in Administrator account.

error.jpg

Just to note though, that a normal administrator account has the same access as the built-in Administrator account, but only has to have you approve the UAC prompt to allow it to perform elevated actions.
 
dear Brink,
mystery solved!
thank you.

i found the built-in admin account. it was one of the 2.

what you say is... that... what i can access /perform/ do from the built-in admin account, i will also be able to do thru the normal admin account? every nook and cranny of the computer can be in my control thru either of the 2 admin accounts, right?

if that is so, the restrictions i thought i was facing (non-accessability) must be because of not having windows 8 pro.

i will have to look into all the things i was not able to access.

thank you, once again, Brink.

warmth.
biren
 
I'm happy to hear that you found the built-in Administrator account. :)

If you are referring to MMCs like Group Policy, Security Policy, Local Users and Groups, etc..., then yeah those are only available in the Pro and Enterprise editions.

Otherwise, all administrator accounts have full access. It's just that only the built-in "Administrator" is natively "elevated" to not need UAC approval before doing anything that requires elevated rights. The normal unelevated administrator accounts, would need UAC approval first.
 
i tried all above ....i am not able to do anything because user account control window yes button not shown please help me
 
Hello Balajiraja, and welcome to Eight Forums.

Are you signed in to an administrator account?

If so, then you should be able to use any of the options in the tutorial available to you no matter of UAC.
 
Back
Top