Enable the (Hidden) Administrator Account on Windows 7 or Vista
Many people familiar with prior versions of Windows are curious what happened to the built-in Administrator account that was always created by default. Does this account still exist, and how can you access it?
The account is created in Windows 7 or Vista, but since it’s not enabled you can’t use it. If you are troubleshooting something that needs to run as administrator, you can enable it with a simple command.
Note: You really shouldn’t use this account for anything other than troubleshooting. In fact, you probably shouldn’t use it at all.
Enable Built-in Administrator Account
First you’ll need to open a command prompt in administrator mode by right-clicking and choosing “Run as administrator” (or use the Ctrl+Shift+Enter shortcut from the search box)
image
Now type the following command:
net user administrator /active:yes
You should see a message that the command completed successfully. Log out, and you’ll now see the Administrator account as a choice. (Note that the screenshots are from Vista, but this works on Windows 7)
You’ll note that there’s no password for this account, so if you want to leave it enabled you should change the password.
Disable Built-in Administrator Account
Make sure you are logged on as your regular user account, and then open an administrator mode command prompt as above. Type the following command:
net user administrator /active:no
The administrator account will now be disabled, and shouldn’t show up on the login screen anymore.
How to Enable or Disable the Built-in Elevated Administrator Account in Windows 7
information Information
This tutorial will show you how to enable or disable the built-in elevated Administrator account in Windows 7.
Note Note
Standard user (Users) - The standard account is an unelevated restricted users account. It can help protect your computer by preventing users from making changes that affect everyone who uses the computer, such as deleting files that are required for the computer to work. It is recommend to create a standard account for each user instead of an administrator account for the user. When you are logged on to Windows with a standard account, you can do almost anything that you can do with an administrator account, but if a standard user wanted to do something that requires elevated rights that affects other users of the computer, such as installing software or changing security settings, Windows will give the standard user a UAC prompt to enter the password of an administrator account for approval and confirmation before allowing the action.
administrator user - Is an unelevated administrator account that is created by default during the installation of Windows 7, or is already setup or you on a OEM (ex: Dell) computer. An administrator account has complete access to the computer, and can make any desired changes. To help make the computer more secure, this administrator account type will be prompted by UAC by default to give confirmation before allowed to make any changes that require elevated administrator rights. Such as those that affect the system, other users, or when running anything elevated (Run as Administrator) since running elevated will allow it to have access to the entire computer.
Built-in "Administrator" - Is the hidden elevated administrator account that has full unrestricted access rights and permission on the computer. By default, this elevated "Administrator" account is not prompted by UAC by default to provide confirmation before allowed to make any changes that require elevated administrator permissions since it is an elevated account.
warning Warning
If you enable the built-in Administrator account, it is recommended to create a password for it to help keep it better secured.
For better security purposes, it is not recommended to leave the built-in Administrator account always enabled, or use it all the time for just everyday purposes.
OPTION ONE
Through Local Users and Groups
NOTE: This option will only be available in the Windows 7 Professional, Ultimate, and Enterprise editions.
1. Open the Local Users and Groups manager.
2. In the left pane, click on the Users folder. (See screenshot below step 3)
3. In the middle pane, right click on Administrator and click on Properties. (See screenshot below)
Built-in Administrator Account - Enable or Disable-local_users_and_group.jpg
4. To Enable the Built-in Elevated Administrator Account
A) Uncheck the Account is disabled box. (See screenshot below step 6)
B) Go to step 6.
5. To Disable the Built-in Elevated Administrator Account
NOTE: This is the default setting.
A) Check the Account is disabled box. (See screenshot below step 6)
6. Click on OK. (See screenshot below)
Built-in Administrator Account - Enable or Disable-properties.jpg
7. Close the Local Users and Groups window. (See screenshot below step 3)
8. Log off, and you will now see the built-in Administrator account log on icon added (enabled) or removed (disabled) from the log on screen. (See screeenshot below)
NOTE: Click on the Administrator icon to log on to the built-in Administrator account.
Built-in Administrator Account - Enable or Disable-log-.jpg
OPTION TWO
In a Elevated Command Prompt
NOTE: This option can be used in all editions of Windows 7. If your Windows 7 uses another language than English, then you may need to translate the word administrator part of the commands below to your language to use instead.
1. Open a elevated command prompt.
2. To Enable the Hidden Built-in Elevated Administrator Account
A) In the elevated command prompt, copy and paste the command below and press Enter. (See screenshot below)
NOTE: If you had previously renamed the built-in "Administrator" account's name, then you will need to substitute administrator in the command below with the new name instead.
net user administrator /active:yes
Built-in Administrator Account - Enable or Disable-command_enable.jpg
B) Go to step 4.
3. To Disable the Hidden Built-in Elevated Administrator Account
NOTE: This is the default setting.
A) In the elevated command prompt, copy and paste the command below and press Enter. (See screenshot below)
NOTE: If you had previously renamed the built-in "Administrator" account's name, then you will need to substitute administrator in the command below with the new name instead.
net user administrator /active:no
Built-in Administrator Account - Enable or Disable-command_disable.jpg
4. Close the elevated command prompt.
5. Log off, and you will now see the built-in Administrator account log on icon added (enabled) or removed (disabled) from the log on screen. (See screeenshot below)
NOTE: Click on the Administrator icon to log on to the built-in Administrator account.
Click image for larger version Name: Log-on.jpg Views: 18831 Size: 148.3 KB ID: 563
OPTION THREE
Through Local Security Policy
NOTE: This option will only be available in the Windows 7 Professional, Ultimate, and Enterprise editions.
1. Open the Local Security Policy editor.
2. In the left pane, expand Local Policies, and click on Security Options. (See screenshot below)
Built-in Administrator Account - Enable or Disable-secpol-1.jpg
3. In the right pane, right click on Accounts: Administrator account status and click on Properties. (See screenshot above)
4. To Enable the Hidden Built-in Elevated Administrator Account
A) Select (dot) Enabled. (See screenshot below step 6)
B) Go to step 6.
5. To Disable the Hidden Built-in Elevated Administrator Account
NOTE: This is the default setting.
A) Select (dot) Disabled. (See screenshot below step 6)
6. Click on OK. (See screenshot below)
Built-in Administrator Account - Enable or Disable-secpol-2.jpg
7. Close the Local Security Policy window. (See screenshot below step 2)
8. Log off, and you will now see the built-in Administrator account log on icon added (enabled) or removed (disabled) from the log on screen. (See screeenshot below)
NOTE: Click on the Administrator icon to log on to the built-in Administrator account.
Click image for larger version Name: Log-on.jpg Views: 18831 Size: 148.3 KB ID: 563
OPTION FOUR
Enable from System Recovery (WinRE) at Boot
1. For how, see: How to Enable the Built-in Administrator Account from WinRE
That's it,
Submit an article or tip