How-To Geek

How to change a user account to administrator on windows 10 and 11.

At times, a backup administrator account can be helpful.

Quick Links

Change a user account to administrator using the settings app, change a user account to administrator using the control panel, change a user account to administrator using computer management, change a user account to administrator using the netplwiz command, change a user account to administrator using the command prompt, key takeaways.

  • Creating separate user accounts on Windows can help maintain professional files and serve as a backup for trying new features or accessing work-related features.
  • You can easily change a user account to an administrator using either the Settings app, Control Panel, Computer Management, Netplwiz command, Command Prompt, or PowerShell.
  • While it's a simple process, it may not be recommended to change a user account to an administrator on a shared computer. You can always disable the user or administrator account if needed.

On Windows, every new account you create is a user account by default. As a result, it gets limited privileges and is restrictive. But, you can grant full access by turning the user account into an administrator. Here's how.

Whether you share your computer with someone or not, maintaining separate professional files can help save the day. Creating a user account is simple, and you can change it into an administrator account as a backup in case something goes wrong while trying new features, especially if you need to use a Microsoft account to have access to certain features for work.

We're showing Windows 11 in this example. However, these will work on Windows 10 and on older versions as well.

Using the Settings app is a straightforward way to change an existing user account to administrator. You can make this happen only from the administrator account on your computer. So, log in with your administrator account to proceed.

To upgrade the user account, press Windows+I to open the "Settings" app.

Press Windows+I to open the

Select the "Accounts" option from the left column.

Select the

Select the "Family & other users" option.

Select the

You'll see the Standard User account under the "Other Users" or "Your Family" section. Select the dropdown next to the user account.

Select the drop-down next to the user account.

Select "Change account type."

Select

Select "Yes" when the User Account Control prompt asks you whether you want to let the "Settings" app make changes.

From the ''Change Account Type" window, use the dropdown for the "Account Type" to pick "Administrator." Press the "OK" button when you're done.

From the ''Change Account Type

That will upgrade the Standard User account to Administrator.

Click the Start button, type "Control Panel" in the Windows Search, and press Enter to launch it.

Click Start, type

When the "Control Panel" window opens, select "User Accounts."

When the

Then, select "Manage Another Account."

Then, select

Select "Yes" from the User Account Control prompt. From the next window, double-click the user account that you want to change.

From the next window, double-click the user account you want to change.

Then, select "Change Account Type."

Then, select

Finally, select the "Administrator" option and click "Change Account Type" to confirm the change.

Finally, select the

You can also use the Computer Management app. This method is more complex but achieves the same result.

You can't use this method if you're running the Home edition of Windows.

Click the Start button, type "Computer Management" in the Windows Search, and hit Enter.

Click Start, type

From the Computer Management window, select "Local Users and Groups" from the left column and "Users" from the middle column.

From the

Next, double-click the user account that you want to change to administrator from the middle column.

Next, double-click the user account you want to change to administrator from the middle column.

When the account properties window pops up, go to the "Member Of" tab.

When the account properties window pops up, go to the

You'll see that the select user account only appears as a member of the "Users" group. Next, select the "Add" button.

You'll see that the select user account only appears as a member of the

Type "Administrators" in the text field and select the "OK" button.

Type

From the account properties window, select "Administrators," and then select the "OK" button to add the user account to the Administrators group.

select

Using Netplwiz gives you a similar experience to Computer Management but in a simplified environment.

Hit Windows+R to open the Run dialog box, type "netplwiz," and press Ctrl+Shift+Enter to launch it with administrative privileges.

Netplzwiz in a Run window.

When the User Accounts Control prompt shows up, select "Yes." From the "User Accounts" window, select the account that you want to upgrade from user to administrator and select "Properties."

From the

Head to the "Group Membership" tab on the window that pops up.

Head to the

Select "Administrator," and then choose the "OK" button.

Select

You can use the command prompt to run a simple command to change a Standard User account to Administrator.

To open the command prompt , click the Start button, type "cmd" in the Windows Search, and select "Run as Administrator."

click Start, type

In the Command Prompt, type the following command, and then press Enter:

net localgroup administrators "UserAccountName" /add

Replace the text in quotes with the account username on your computer. When you run this command, it looks like this:

Type Command in Command Prompt to change User account to Administrator on Windows.

Change a User Account to Administrator Using the PowerShell

After clicking the Start button, type "windows powershell" into the Windows Search, and select "Run as Administrator."

After clicking Start, type

Choose "Yes" when the User Account Control prompt shows up. Then, type the following command into Windows PowerShell, and then hit Enter:

Add-LocalGroupMember -Group "Administrators" -Member "username"

This is how it will look:

Run Command in Windows PowerShell to Change User to Administrator.

That's it! While it's a simple process, changing a user account to administrator on a shared computer might not be a good idea. So, if you change your mind later, you can always disable the user or administrator account on Windows .

Give Admin Permission/Rights to User in Windows 11/10

In Windows 11 or Windows 10, administrative permissions or rights are required to perform certain actions that make changes to the system or data, such as installing or uninstalling an app or program, renaming, moving, or deleting a file or folder.

A user account in Windows can be either an administrator, a guest, or a standard user account without admin rights. If you have access to an administrator account, you can grant admin rights to another user account. This short tutorial will show you 2 methods (via Settings and CMD) on how to give full administrator permission and rights to a user in Windows 10/11.

Also see : How to Change Administrator Email on Windows 11

Page Contents

How to give admin rights to user in Windows 11/10 via Settings

The bottom line is you need to have access to an administrator account on the Windows PC in order to give admin rights to another user account. Only the administrator account can grant admin rights and privileges to other users.

To give admin rights to a user in Windows 10/11, follow the steps below.

  • In the Start menu, search for and open “ Settings “.

Windows 10 Settings Account Administrator Permission

  • On the left pane, click on Family & other users .
  • Under “ Other users “, select the account you want to give admin rights to.

Change user account type to administrator in Windows 10

  • Click OK to confirm the changes.

After changing the account type to administrator, you should then be able to see an “ Administrator – Local account ” label under the selected user account.

Give admin rights Windows 11/10

In addition, a Windows 11/10 system can have multiple administrator accounts. Thus, you can give admin rights to as many other user accounts as you like.

If you have not created the user account yet, you can directly create a new local admin account instead. Read:  How to Create Local Admin Account Without Password on Windows 11/10 .

How to give administrator permission in Windows 10/11 via CMD

If you prefer to give admin rights to a user via the command prompt instead of the GUI, here’s how to do it.

Firstly, open an elevated command prompt: Search for “ cmd ” on the Windows 10/11 search bar. Right-click Command Prompt from the search result, and then select “ Run as administrator “.

Run Command Prompt as Administrator

In the command prompt window, enter the following command to list all existing user accounts on your Windows 10/11 PC. This step is optional but useful if you do not know or are not sure about the exact name of the user account you want to give administrative rights to. You can copy the name of the user account to be used in the next step.

Give full administrator permission Windows 11/10

To give admin rights to a user account, use the following command. Note : Replace “UserAccount” with the actual name of the user account that you want to give admin rights to.

The following command will add the specified user account to the administrator group, thus granting full administrator rights to the user account.

For example:

How to give admin rights to user in Windows 11/10 using CMD

To remove an existing administrator account from the administrator group , in other words, changing it back to a standard user account, use the following command. Replace “UserAccount” with the actual user account name that you want to delete from the admin group.

Remove administrator account from Windows 10/11

How to check if you have admin rights

If you’re not sure whether you have admin rights on your Windows 11/10 PC, you can check your account type by following these steps:

  • Click the Start button and select Settings .
  • Click on Accounts .
  • On the left pane, click on Your info .
  • Under “Your account type”, you should see whether you have an Administrator or Standard account.

If you have an Administrator account, you have admin rights on your PC. If you have a Standard account, you do not have admin rights and will need to be granted them by an Administrator.

How to remove admin rights from a user

If you’ve granted admin rights to a user and want to revoke them, you can do so by following the same steps as above and changing the account type back to Standard. Alternatively, you can use the CMD method described earlier to remove the user from the Administrators group.

Keep in mind that removing admin rights from a user may cause some programs or features to stop working properly. Make sure you understand the implications before making any changes.

How to give administrator permission in Windows 10

  • Create local admin account without password in Windows 11/10
  • You require permission to make changes to this folder Windows 11

Nyau Wai Hoe

“File not found or no read permission” in Windows 11

Remote Desktop A user account restriction time-of-day restriction preventing logging in

Remote Desktop: A user account restriction is preventing…

Pin Batch File or CMD (Admin) to Taskbar in Windows 11

Pin Batch File or CMD (Admin) to Taskbar in Windows 11

Windows 11 Services to Disable for Gaming

30+ Windows 11 Services to Disable for Gaming Performance

How to set YouTube video quality permanently

How to Set YouTube to Always Play Highest Video Quality

Auto Login Windows 11 Without Password

How to Auto Login Windows 11 Without Password or PIN

Increase volume above 100 Windows 11

How to Boost Volume Above 100% in Windows 11

How to turn a picture into an icon Windows 11

How to Make a Picture an Icon in Windows 11

TechRepublic

Account information.

assigning admin rights windows 10

Share with Your Friends

How to Enable or Disable Administrator Accounts in Windows 10

Your email has been sent

Image of Ray Fernandez

Windows 10 includes a built-in administrator account that, by default, is hidden and disabled for security reasons. Whether you need to perform a bit of Windows management, improve shared computer settings, troubleshoot your system or make changes, this guide presents simple step-by-step methods to enable and disable the administrator account on Windows 10.

  • Using the command line vs. the user management tool

How to enable the Windows 10 Administrator account

How to disable the windows 10 administrator account, should i disable or enable the administrator account, using the command prompt vs. the user management tool.

When enabling and disabling Windows’ administrator account, users can either use the command prompt or the user management tool.

While the command prompt is a valuable and powerful resource, the user management tool is popular among those who need to manage user accounts. It is also more user-friendly and therefore easier to use for beginners, as it provides a more graphical and interactive interface.

PREMIUM: These Windows 10 power tips reveal secret shortcuts to your favorite settings .

On the other hand, those with advanced skills often prefer the command prompt because it is fast and efficient. The command prompt also allows script commands to automate repetitive tasks and save time. Additionally, the command prompt can be used to manage user accounts on remote systems.

In the end, the results will be the same for whichever tool you use. So for this particular task, it is just a matter of preference, comfort and experience.

Command prompt

If you feel comfortable with commands, the command prompt should be your go-to tool to take on this task. You can enable the Windows 10 administrator account in just a few, quick steps:

  • Open a command prompt as an administrator by typing cmd in the search field.
  • From the results, right-click the entry for Command Prompt, and select Run as Administrator.
  • At the command prompt, type net user administrator . The value for Account Active should say No ( Figure A ).

Admin account Windows is not active

  • Type net user administrator /active:yes . You should receive a response that the command was completed successfully.
  • Type net user administrator . The value for Account Active should now say Yes ( Figure B ).

Active admin account Windows

SEE: Explore these simple ways to find your Windows 10 product key .

User management tool

Now, let’s look at how to do the same using the user management tool. Note that the user management tool is not as strict as the command prompt, and it offers a graphic interface that can help you throughout the process.

To enable the Windows 10 Administrator account using the user management tool:

  • Open Administrative Tools, either through the Start menu or through the Control Panel.
  • Select the entry for Computer Management, and open the folder for Local Users And Groups. A quicker way to get here is to type lusrmgr.msc in the Search field.
  • Open the folder for Users, and double-click the Administrator account.
  • Uncheck the option for Account Is Disabled, and click OK or Apply ( Figure C ).

Account is disabled in user management tool

  • Close the User Management window.
  • With the account enabled, log out.
  • Go past the Lock screen, and sign in using the administrator account. No password is required. You can then perform whatever management or troubleshooting you need to accomplish.

SEE: Need a more secure experience? Try Windows in S Mode .

For speed, you can use the command prompt method, which will disable the administrator account in Windows 10 in just three steps:

  • Log out, and then log back in using your own account.
  • Open a command prompt as an administrator, and type net user administrator to confirm that the account is active.
  • Type net user administrator /active: no , then type net user administrator again to confirm that the account is now inactive ( Figure D ).

Confirmation for admin account

If you’re not comfortable using the command prompt, don’t worry. Here is a simple method to deactivate the Windows administrator account using the user management tool:

  • Return to the Local Users And Groups window, and double-click the Administrator account.
  • Check the box for Account Is Disabled.
  • Click OK or Apply, and close the User Management window ( Figure E ).

Check the box for Account is Disabled

SEE: Here’s how to download Windows 10 ISO without Media Creation Tool .

Enabling the administrator account is useful for troubleshooting problems, making system-wide changes and managing user accounts. However, it is also a security risk, as attackers can target administrator accounts to take over a system.

But while disabling the administrator account can improve security and prevent unauthorized changes to your system settings or software, it tends to make troubleshooting more challenging.

Disabling or enabling administrator accounts is not a difficult task. That said, the changes you make to a system can impact its performance, security, functionality and reliability. Usually, it is recommended that only users who have mid to advanced technical skills make these types of changes.

In the end, whether or not you decide to enable or disable the administrator account will depend on your personal choice and your specific needs and concerns.

Subscribe to the Developer Insider Newsletter

From the hottest programming languages to commentary on the Linux OS, get the developer and open source news and tips you need to know. Delivered Tuesdays and Thursdays

  • Support for these Microsoft enterprise products ends in 2023
  • How to Create a Local Account in Windows 11 Pro
  • Top IDEs for Java Developers (2023)
  • Stack Overflow's 2023 Developer Survey: Are developers using AI?
  • Programming languages and developer career resources

Image of Ray Fernandez

Create a TechRepublic Account

Get the web's best business technology news, tutorials, reviews, trends, and analysis—in your inbox. Let's start with the basics.

* - indicates required fields

Sign in to TechRepublic

Lost your password? Request a new password

Reset Password

Please enter your email adress. You will receive an email message with instructions on how to reset your password.

Check your email for a password reset link. If you didn't receive an email don't forgot to check your spam folder, otherwise contact support .

Welcome. Tell us a little bit about you.

This will help us provide you with customized content.

Want to receive more TechRepublic news?

You're all set.

Thanks for signing up! Keep an eye out for a confirmation email from our team. To ensure any newsletters you subscribed to hit your inbox, make sure to add [email protected] to your contacts list.

site logo

How To Change The Administrator On Windows 10

We show you 5 different ways

Author avatar

Windows 10 has the Standard user account and the Administrator account, each with different privileges to use a device and applications.

An administrator account offers complete system control with privileges such as access to all files on the device. You can also modify other user accounts and change them to Standard or Administrator, install software and hardware, change security settings, and execute elevated tasks.

However, if you got locked out of your computer , forgot your administrator password , or your admin rights were accidentally revoked, you can’t make any changes on the device.

How To Change The Administrator On Windows 10 image 1

The Standard user account on the other hand is more restrictive. Standard users can work with apps and change settings that won’t affect other user accounts. Unlike administrators, Standard users cannot install new apps. Plus, if they have to execute an elevated task, they’ll need administrative credentials to complete it.

There are different reasons why you may want to change the administrator on Windows 10. For example, if you’re handing over the device to someone else, or you want to add someone else as an administrator and become a Standard user yourself. Windows 10 includes different ways for you to change the administrator, which we’ll explain in this guide.

There are five different ways to change the administrator on Windows 10.  You can use:

  • Control Panel.
  • User Accounts.
  • PowerShell.
  • Command Prompt.

How To Change Windows 10 Administrator Using Settings

  • Click Start > Settings and select Accounts .

How To Change The Administrator On Windows 10 image 2

  • Click Family & other users .

How To Change The Administrator On Windows 10 image 3

  • Click on the user account and select Change account type .

How To Change The Administrator On Windows 10 image 4

  • Select the Administrator account type and then click OK .

How To Change The Administrator On Windows 10 image 5

  • Restart your computer to effect the change and start using the account with the administrator privilege level.

How To Change The Administrator On Windows 10 Using Control Panel

  • Click Start , select Control Panel and go to the User Accounts section. 

How To Change The Administrator On Windows 10 image 6

  • Click on the account you want to change and select Change the account type .

How To Change The Administrator On Windows 10 image 7

  • Choose the user account you’d like to change to administrator.

How To Change The Administrator On Windows 10 image 8

  • Click the Change Account Type link on the left.

How To Change The Administrator On Windows 10 image 9

  • Select Standard or Administrator account

How To Change The Administrator On Windows 10 image 10

How To Change Windows 10 Administrator Using User Accounts

You can set an account to Administrator type using the netplwiz command or User Accounts.

  • To do this, click Start and type netplwiz in the search box. Click the result to open User Accounts .

How To Change The Administrator On Windows 10 image 11

  • Click on the account you want to change and select Properties .

How To Change The Administrator On Windows 10 image 12

  • Next, click the Group Membership tab. Select the Standard user or Administrator account you’d like to change. You can also choose different user groups under the Other membership option. Here, you can select Remote Desktop users, Guests, Power Users, Cryptographic operators , and backup operators among others.

How To Change The Administrator On Windows 10 image 13

  • Click Apply > OK . Repeat this action to confirm and then restart your device to apply the changes and use your new administrator account.

How To Change The Administrator On Windows 10 Using PowerShell

PowerShell is a command line shell that allows system administrators to automate tasks like creating new users, passwords, and more so that they don’t have to waste time on such mundane things (read more in our guide on Using PowerShell For Home Users ).

  • To change the administrator on Windows 10 using PowerShell, right-click Start > Windows PowerShell (Admin).

How To Change The Administrator On Windows 10 image 14

  • Type this command to change the account to administrator: add-LocalGroupMember -Group “Administrators” -Member “ACCOUNT-NAME”

Note: Replace “Account-Name” with the actual name of the account you’re changing to administrator.

How To Change The Administrator On Windows 10 image 15

How To Change The Administrator On Windows 10 Using Command Prompt

  • Click Start and type CMD in the search box. Select Command Prompt > Run as administrator .

How To Change The Administrator On Windows 10 image 16

  • Type this command to change the account type to Administrator: net localgroup Administrators “ACCOUNT-NAME” /add . Press enter .

Note : Remember to replace “Account-Name” with the actual name of the account you’re changing to administrator.

How To Change The Administrator On Windows 10 image 17

  • To view the account type, enter this command: net user ACCOUNT-NAME and press Enter . Once you complete these steps, the account will load with the administrator privileges next time the user signs in to the device.

Create a Local Administrator Account In Windows 10

You can also create a local user or administrator account in Windows 10 and give it administrator permissions.  Users of Windows 10 version 1803 and later can add security questions, which allows them to reset their local account passwords anytime.

  • To create a local user account and give it administrator privileges, click Start > Settings > Accounts and select Family & other users .
  • Select Add someone else to this PC .

How To Change The Administrator On Windows 10 image 19

  • Next, enter a username and password.

How To Change The Administrator On Windows 10 image 20

  • Choose the security questions you prefer to answer in case you lose or forget your password, and click Next .

How To Change The Administrator On Windows 10 image 21

Enter a username and password, and type a password hint or select security questions. Click Next once you’re done, and then use any of the methods above to change the user account to an administrator.

Were you able to change the administrator on your Windows 10? Let us know in the comments.

' src=

Elsie is a technology writer and editor with a special focus on Windows, Android and iOS. She writes about software, electronics and other tech subjects, her ultimate goal being to help people out with useful solutions to their daily tech issues in a simple, straightforward and unbiased style. She has a BCom degree in Marketing and currently pursuing her Masters in Communications and New Media. Read Elsie's Full Bio

Read More Posts:

assigning admin rights windows 10

Leave a Reply

Your email address will not be published. Required fields are marked *

  • All about AI
  • Google Bard
  • Inflection AI Pi Chatbot
  • Anthropic Claude
  • Generative AI
  • AI Image Generation
  • AI Regulation
  • AI Research
  • Large Language Models (LLM)
  • Surface Pro
  • Surface Laptop
  • Surface Book
  • Surface Duo
  • Surface Neo
  • Surface Studio
  • Surface Hub
  • Surface Pen
  • Surface Headphones
  • Surface Earbuds
  • About WinBuzzer
  • Follow Us: PUSH, Feeds, Social
  • Write for Us
  • Cookie Policy and Privacy Policy
  • Terms of Service

How to Change a Normal User to Administrator in Windows 11 or Windows 10

We show you how to make a user an administrator in Windows 11 or Windows 10 via Settings, netplwiz, Command Prompt, and more.

Featured - How to Change a User Account to Administrator on Windows 10 and 11

  • 1 How to Make a User an Administrator in Windows 11 or Windows 10 via Settings
  • 2 How to Make a User an Administrator in Windows 11 or Windows 10 via Control Panel
  • 3 How to Give Administrator Permission in Windows 11 or Windows 10 with Computer Management
  • 4 How to Make Yourself (or Another User) an Administrator in Windows 11 or 10 via netplzwiz
  • 5 How to Make a User an Administrator in Windows 11 or Windows 10 Using CMD
  • 6 How to Create an Administrator in Windows 11 or Windows 10 With PowerShell
  • 7 FAQ – Frequently Asked Questions About Windows Administrator Accounts
  • 8 Extra: How to Enable the Hidden Administrator Account in Windows 11 and Windows 10
  • 9 Extra: How to Delete a User Account in Windows

Windows has two general account types, the “Standard” user, who gains access to a selected number of features and functions, and the “Administrator”, who can perform more advanced tasks such as app installation, global settings changes, and command execution. Today, we're going to show you how to change a user account to an administrator in Windows 10 or Windows 11 .

Before we start, however, it's worth thinking through the implications of making the change to an administrator account. You should understand that you are granting this user full control over their PC. This includes the ability to see and interact with other admins' files, install authorized programs (including malware), bypass blocking software, or entirely wipe the PC.

Instead, for some users, you may be better served to retain the standard account but enter the administrator password for them when they want to make advanced changes. This way, you can vet any changes to the device before agreeing to them.

With that said, if you're sure you want to change a user to an administrator in Windows 10 or 11, you can follow along below:

⚠️  Please note: In this tutorial, we use screenshots of Windows 11 to demonstrate the process. Please be aware that though the same general method applies for Windows 10, there may be some minor changes to the process and UI elements. These will be noted in the relevant steps in the guide.

How to Make a User an Administrator in Windows 11 or Windows 10 via Settings

Unsurprisingly, the most user-friendly way to change a user to administrator in Windows 11 or Windows 11 is through the in-built settings UI. Here's how:

Windows 11 - Open Settings

How to Make a User an Administrator in Windows 11 or Windows 10 via Control Panel

If you prefer a classic UI, you can achieve the same goal in around the same amount of time using the Control Panel app. This has the advantage of being unified between OSes:

Windows 11 - Open Control Panel

How to Give Administrator Permission in Windows 11 or Windows 10 with Computer Management

A more advanced way to make a user an administrator in Windows 11 or 10 involves use of the “Computer Management” tool. This should be available regardless of whether you have a Pro or Home edition. Here's how you use it:

Windows 11 - Open Computer Management

How to Make Yourself (or Another User) an Administrator in Windows 11 or 10 via netplzwiz

Netplzwiz is the dedicated user accounts tool in Windows 10 and Windows 11. By opening it directly and cutting out the middleman, you can very quickly give the administrator permission to a user:

Windows 11 - Run - Netplwiz - Accept

How to Make a User an Administrator in Windows 11 or Windows 10 Using CMD

If you want to forgo the UI entirely, Command Prompt is another option. The net localgroup command lets you quickly change an account's permissions without being too difficult to remember. Here's how you can use it:

Windows 11 - Open Elevated Command Propmpt

  In your CMD window, write the following, replacing “User” with the full username of the account:

Windows 11 - Elevated Command Propmpt - Enter Cmd

How to Create an Administrator in Windows 11 or Windows 10 With PowerShell

As is typical, you can use a PowerShell command to perform the same action if that's your preference. The command is a little harder to remember, but it's still pretty easy:

Windows 11 - Open Elevated Powershell

  In PowerShell, the command you want to type is as follows:

Windows 11 - Elevated Powershell - Enter Cmd

FAQ – Frequently Asked Questions About Windows Administrator Accounts

Can i change a user account to an administrator without logging in as an administrator first.

No, you must be logged in with an administrator account to change another user's account type. This security measure prevents standard users from elevating their own privileges without authorization. If you're not already logged in as an administrator, you'll need to switch to an account that has these privileges or ask an existing administrator to make the change for you.

What should I do if the “ Change account type ” option is grayed out or not clickable?

If the “ Change account type ” option is grayed out, it typically means you don't have sufficient permissions to make the change, or there are restrictions placed on the account (possibly due to group policies set by an administrator). First, ensure you're logged in as an administrator. If you are and the issue persists, it may be necessary to check for any applied group policies or other administrative settings that could be restricting changes. Tools like the Group Policy Editor (gpedit.msc) can be used for this purpose, but caution is advised as incorrect changes can affect system stability.

How can I prevent a standard user from being changed to an administrator without my permission?

To prevent unauthorized elevation of user accounts, ensure that all administrator account passwords are strong and known only to authorized individuals. Additionally, configuring User Account Control (UAC) settings to always notify or require a password for changes can add an extra layer of security. Regularly reviewing user accounts and privileges can also help catch any unauthorized changes early.

Is there a way to track changes made by a user after they've been given administrator rights?

While Windows doesn't have a built-in feature to specifically track changes made by individual administrators, you can use Event Viewer to monitor system and security logs for significant actions and changes. For more detailed tracking, consider implementing third-party monitoring software designed for auditing and compliance, which can provide more granular details about user activities and changes.

How can I quickly switch between a standard user and an administrator account?

To switch between user accounts, you can log out of the current account and log into the other. Alternatively, you can use the “ Switch user ” option available through the Start menu or the Ctrl + Alt + Del security screen for faster switching without logging off. This is particularly useful if you want to keep applications running in the background on one account while working in another.

Can I give a user temporary administrator privileges and then automatically revert them to a standard user?

Windows does not support automatically reverting administrator privileges after a set period. You will need to manually change the account back to a standard user when the administrative tasks are completed. For temporary needs, consider performing the necessary tasks yourself as an administrator or closely supervising the user's actions during their temporary elevation.

What are the implications of making a child's account an administrator?

Granting a child administrator access removes many of the safeguards that standard accounts provide, such as restrictions on installing software, accessing inappropriate content, or making unintended system changes. It's recommended to keep children's accounts as standard users and use parental control features to monitor and manage their activities. If a child needs to perform an action that requires administrator privileges, it's safer to supervise the activity and enter the administrator password when prompted.

How do I ensure that a new administrator does not change critical system settings accidentally?

Educating new administrators about the impact of their actions and setting clear guidelines for system changes can help prevent accidental modifications. Consider creating a documented policy outlining acceptable changes and procedures for making significant system modifications. For critical environments, implementing change management processes and tools can provide oversight and allow for rollback of unintended changes.

Can administrator privileges be assigned to a program instead of a user?

While you cannot directly assign administrator privileges to a program, you can configure programs to always run with elevated privileges by adjusting their properties or using task scheduler to launch the program with admin rights. This approach allows specific programs to run as if an administrator launched them, without granting the user administrative access to the entire system. Be cautious with this approach, as it can potentially expose your system to security risks if misused.

What is the difference between changing a user to an administrator via Settings and using the Control Panel?

The main difference lies in the user interface and navigation. The Settings app, introduced in Windows 8 and expanded in Windows 10 and 11, offers a more modern and streamlined interface, while the Control Panel provides a classic view that some users may be more familiar with. Functionally, both methods achieve the same result: changing a user's account type. The choice between them is largely a matter of personal preference or familiarity.

Will changing a user to an administrator affect existing files or software on their account?

Elevating a user's privileges to an administrator does not directly modify existing files or software. However, it grants the user the ability to access and modify all files on the system, install new software, and change system settings, which could indirectly affect the system's operation and security. It's important to trust the user with administrator privileges due to the potential impact on system stability and security.

How can I limit what a new administrator can do on the system?

Once a user is granted administrator rights, they have broad control over the system. To mitigate risks, you can educate new administrators on best practices, establish clear guidelines for system changes, and possibly use third-party software that allows for more granular permission settings than Windows provides by default. Regular audits and monitoring can also help ensure that administrators adhere to established protocols.

Can making a user an administrator help with software compatibility issues?

Some older or specialized software may require administrator rights to function correctly due to how they interact with system files or settings. While granting administrator rights can resolve these issues, it's recommended to first try compatibility modes or settings adjustments that allow the software to run under standard user privileges. This maintains system security while allowing the necessary software to function.

What precautions should I take before granting someone administrator access?

Before granting administrator access, ensure the user is aware of the responsibilities and potential risks associated with elevated privileges. Discuss the scope of permissible changes, establish clear guidelines for system modifications, and consider implementing monitoring or auditing tools to track significant actions. Regularly review and confirm the necessity of administrator privileges to minimize potential security risks.

How can I revoke administrator privileges if I no longer need them or if it was a mistake?

To revoke administrator privileges, follow the same steps you used to grant them but choose “ Standard User ” when changing the account type. This action should be performed from another account that already has administrator rights. Regularly reviewing user account types and privileges can help ensure that only necessary users retain elevated access, reducing potential security risks.

Extra: How to Enable the Hidden Administrator Account in Windows 11 and Windows 10

Windows 10 - How to Enable the Hidden Administrator Account

Extra: How to Delete a User Account in Windows

Feature - How to Delete a User Account in Windows 11

  • Administrator
  • Desktop Operating Systems
  • How to change administrator account in Windows 11
  • How to change Administrator in Windows 10
  • How to change Administrator in Windows 11
  • how to change administrator on Windows 10
  • how to change administrator on Windows 11
  • How to select Administrator in Windows 10
  • How to select Administrator in Windows 11
  • Make adminsitrator
  • Microsoft Windows
  • Operating Systems
  • Windows 10 accounts
  • Windows 10 change administrator
  • Windows 11 accounts
  • Windows 11 change administrator

Recent News

assigning admin rights windows 10

Microsoft Edge Releases Patch for Data Import Glitch Amidst Unauthorized Data...

assigning admin rights windows 10

Microsoft Announces Retirement of Azure IoT Central Service by 2027

assigning admin rights windows 10

Microsoft Loop Enhances User Experience with Figma Integration

assigning admin rights windows 10

Microsoft 365 Announces End of Life for Publisher by 2026

Subscribe to WinBuzzer on Google News

assigning admin rights windows 10

assigning admin rights windows 10

Create a local user or administrator account in Windows

You can create a local user account (an offline account) for anyone who will frequently use your PC. The best option in most cases, though, is for everyone who uses your PC to have a Microsoft account . With a Microsoft account, you can access your apps, files, and Microsoft services across your devices.

If needed, the local user account can have administrator permissions; however, it's better to just create a local user account whenever possible.

Caution:  A user with an administrator account can access anything on the system, and any malware they encounter can use the administrator permissions to potentially infect or damage any files on the system. Only grant that level of access when absolutely necessary and to people you trust.

As you create an account, remember that choosing a password and keeping it safe are essential steps. Because we don’t know your password, if you forget it or lose it, we can't recover it for you.

Create a local user account

Select Start  >  Settings  > Accounts and then select  Family & other users. (In some versions of Windows you'll see  Other users .)

Next to Add other user , select Add account . 

Select I don't have this person's sign-in information , and on the next page, select Add a user without a Microsoft account .

Enter a user name, password, or password hint—or choose security questions—and then select Next .

Open Settings and create another account

Change a local user account to an administrator account

Select Start  >  Settings  > Accounts .

Under  Family & other users , select the account owner name (you should see "Local account" below the name), then select Change account type .

Note:  If you choose an account that shows an email address or doesn't say "Local account", then you're giving administrator permissions to a Microsoft account, not a local account.

Under Account type , select Administrator , and then select  OK .

Sign in with the new administrator account.

If you're using Windows 10, version 1803 and later, you can add security questions as you'll see in step 4 under Create a local user account . With answers to your security questions, you can reset your Windows 10 local account password. Not sure which version you have? You can check your version .

Select Start  >  Settings  > Accounts  and then select  Family & other users. (In some versions of Windows you'll see  Other users .)

Select Add someone else to this PC .

Under  Family & other users , select the account owner name (you should see "Local Account" below the name), then select Change account type .

assigning admin rights windows 10

Related topics

Microsoft account help

How to reset your Microsoft account password

Get help with Windows activation errors

Facebook

Need more help?

Want more options.

Explore subscription benefits, browse training courses, learn how to secure your device, and more.

assigning admin rights windows 10

Microsoft 365 subscription benefits

assigning admin rights windows 10

Microsoft 365 training

assigning admin rights windows 10

Microsoft security

assigning admin rights windows 10

Accessibility center

Communities help you ask and answer questions, give feedback, and hear from experts with rich knowledge.

assigning admin rights windows 10

Ask the Microsoft Community

assigning admin rights windows 10

Microsoft Tech Community

assigning admin rights windows 10

Windows Insiders

Microsoft 365 Insiders

Was this information helpful?

Thank you for your feedback.

How to set up Assigned access on Windows 10 to restrict users to a single app

Are you building a kiosk computer or you only want to restrict users to interact with a single app? Then use this guide to set up Assigned access on Windows 10.

assigning admin rights windows 10

When you need to share your computer with family members or friends, you typically create a new Standard User account to grant them access to use apps and browse the web. However, there will be times, when you may need a more restricted environment to allow users to access only one app.

For example, if you're setting up a kiosk computer for customers at your business to display a demo, or when hosting a party, you may want everyone to play DJ using the Groove Music app, but you don't want anybody snooping into your personal files.

Assigned access is a feature on Windows 10 that allows you to create a lockdown environment that lets users interact with only one app when they sign into a specified account. With Assigned access, users won't be able to get to the desktop, Start menu, or any other app, including the Settings app.

In this Windows 10 guide, we'll walk you through the steps to set up Assigned access on your computer using your administrator account and a standard account, which will be used to let users interact with a particular app.

How to configure Assigned access on Windows 10

Before using this feature, you should consider that you can only assign apps that come bundled with Windows 10 and the ones from the Store. Classic desktop apps support is only available for Windows 10 Enterprise and Education.

Also, Assigned access can only be set up on Windows 10 Pro, Windows 10 Mobile, Education, and Enterprise.

  • Using your administrator account, create a new Standard User account. You can find the instructions on how to do this in our previous guide.
  • Use the Windows key + I to open the Settings app.
  • Click Accounts .
  • Click Family & other people .
  • Under Other users, click the Set up assigned access link.
  • Click the Choose an account button, and select the standard account you want to assign to run a single app.
  • Click the Choose an app button, and select the supported app to run on Assigned access.
  • Restart your computer and then sign-in with account you just configured.

Once you're done using the account, because you don't have access to the Start menu, you'll need to use the Ctrl + Alt + Del keyboard shortcut to sign out of the account. Then to completely terminate the account session, simply restart your computer by clicking the Restart button from the Power menu on the Lock screen.

How to disable Assigned access

When you no longer need Assigned access on your PC, follow these steps:

  • Use the Windows key + I keyboard shortcut to open the Settings app.
  • Click the account currently setup, and click Don't use assigned access .

Assigned access is a feature that Microsoft first introduced with Windows 8.1, but it has been improved on Windows 10. Also, while the feature is primarily designed for kiosk scenarios, anyone can use the feature to restrict users to interact with a single app.

Have you tried Assigned access on Windows 10? Let's us know your experience in the comments below.

Get the Windows Central Newsletter

All the latest news, reviews, and guides for Windows and Xbox diehards.

Mauro Huculak

Mauro Huculak is technical writer for WindowsCentral.com. His primary focus is to write comprehensive how-tos to help users get the most out of Windows 10 and its many related technologies. He has an IT background with professional certifications from Microsoft, Cisco, and CompTIA, and he's a recognized member of the Microsoft MVP community.

  • 2 7 Nightingale tips and tricks for beginners I wish I knew before playing the game
  • 3 Microsoft brings Wi-Fi 7 support to Windows 11 with latest preview build, coming to everyone later this year
  • 4 New Helldivers 2 patch takes care of all those AFK queue dodgers, but one of its worst bugs still remains
  • 5 This PC comes without memory, storage, or an operating system, and it's the best thing to happen to laptops this year

assigning admin rights windows 10

Navigation

Reset Windows Admin and Standard user account password.

View, export, and restore passwords saved on your iPhone.

Wipe iOS passcode, remove Apple ID & Screen Time passcode.

Fake iPhone location and simulate GPS movement in one click.

  • Homepage >
  • Solution >
  • Windows Tips >
  • How to Get Administrator Privileges on Windows 10

Get Administrator Privileges On Windows 10 with or without Password

By Penny Warren Published on March 15,2021 Windows Tips

What are administrator privileges? If you own this computer, you need to create an administrator account. It is important to get administrator privileges on Windows 10 . All computer activities are under control. No matter you install or uninstall a program, you need to provide the administrator permission to move on. If you lose administrator privileges on Windows 10, you are not able to manage installed programs, change computer settings, alter features, and do many customized changes.

The question is how to make a user an administrator on Windows 10. Things will be worse if you forgot the original administrator password. Here’re the top 5 ways to login as an administrator and get administrator privileges on Windows 10. To retrieve your lost Windows administrator privileges, and regain full admin right on Windows 10, just do as the following steps show.

How to Get Administrator Privileges On Windows 10

  • Part 1: Forgot Admin Password? Regain Admin Privileges Here
  • Part 2: Get Windows 10 Admin Privileges with CMD
  • Part 3: Get Windows 10 Admin Privileges by User Management
  • Part 4: Get Windows 10 Admin Privileges via Group Privacy
  • Part 5: Get Windows 10 Admin Privileges Using Registry Repair
  • Part 6: FAQs of Getting Admin Privileges on Windows 10

Part 1: How to Get Administrator Privileges On Windows 10 without Password

If you forgot the original administrator password, you can use imyPass Windows Password Reset to reset and remove Windows 10 administrator password immediately. All kinds of Windows passwords can be removed from your Windows 10/8/7 computer. Later, you can create a new account and login as an administrator on Windows 7/8/10 successfully. Here’re the main features of the Windows administrator password removal software.

imyPass Windows Password Reset

Box

4,000,000+ Downloads

Reset and change Windows administrator password with bootable CD/DVD/USB drive.

Create a new administrator account without a few clicks.

Reset Windows system password and regain the locked system.

Compatible with Windows 10/8.1/8/7/Vista/XP/NT/etc. and almost all file disks and hard disks.

Intuitive interface with easy-to-use options.

Step 1 Free download, install, and launch imyPass Windows Password Reset on a normal computer. Choose between Create Password Reset CD/DVD and Create Password Reset USB Flash Drive to burn a Windows 10 administrator password reset tool.

Run

Step 2 Insert a blank CD/DVD or USB flash drive into your computer. After the burning process, click OK to confirm. Take out the burned disk and close this program.

Burn CD DVD USB Disk Drive

Step 3 Reboot your locked Windows 10 computer. Press F12 or ESC on the keyboard to enter into the Boot menu. Press the arrow-down or arrow-up key to choose your inserted disk or drive. Press the Enter key to move on. Save it and exit the Boot Menu . Later, your computer can restart automatically.

Boot Menu Windows

Step 4 Now you can see the imyPass Windows Password Reset interface. To remove the forgotten Windows 10 administrator password, select the current operating system.

Select Windows OS

Step 5 All available user accounts will be listed in the interface. Choose which administrator account and password you want to reset. Click Reset Password followed by OK to save changes.

Reset Password Windows

Step 6 To get administrator privileges on Windows 10 without a password, select the Windows OS and click the Add User option. Set a new administrator account and password. Click OK and then Reboot to get the Windows 10 administrator permission.

Add User

Part 2: How to Get Administrator Privileges On Windows 10 Using Command Prompt

No matter you want to enable or disable Windows 10 administrator privileges, you can use Command Prompt to achieve it. There are no complicated steps. You can check the following Windows administrator account login tutorial.

Step 1 Open the Windows Start menu. Type CMD in the search bar.

Step 2 Choose Run as administrator from the Command Prompt right-click menu.

Step 3 Set an administrator account user name and password for your Windows 10 computer.

Step 4 Type net user administrator /active:yes to enable administrator account on Windows 10. (You can type net user administrator /active:no to disable Windows 10 administrator account.)

Step 5 Press the Enter key on the keyboard to get administrator privileges on Windows 10 using CMD. As a result, you can log in as an admin in the command prompt on Windows 10.

Get Administrator Pricileges With CMD

Part 3: How to Get Administrator Privileges On Windows 10 via User Management Tool

You can enable a Windows administrator account with Administrator Properties as well. The default Windows 10 administrator account has no password protection. Don’t forget to set an administrator password. After that, every time you open Windows, you can see the administrator user login screen.

Step 1 Go to the Windows Start menu or Control Panel to open Administrator Tools .

Step 2 Choose the specific entry for Computer Management . Find and open the Local Users and Groups folder.

Step 3 Open the Users folder. Double-click on the Administrator account.

Step 4 Right-click on Administrator . Choose Properties to get a new Administrator Properties window.

Step 5 Uncheck the Account is Disabled option. Click OK or Apply to confirm and get administrator rights on Windows 10.

Computer Management

Part 4: How to Get Administrator Privileges On Windows 10 with Group Policy

For system administrators, you can enable a default Windows administrator user account by using Group Policy. But this administrator privileges regaining method does not work for Windows 10 Home editions.

Step 1 Hold and press the Windows and R keys at the same time.

Step 2 Type gpedit.msc in the Windows Run dialog window. Press the Enter key on your keyboard.

Step 3 Go to Computer Configuration . Choose Windows Settings, Security Settings, Local Policies , and Security Options in order.

Step 4 Open Accounts: Administrator account status in the right pane. Set the Local Security Settings to the Enabled status.

Step 5 Since the Windows administrator account is enabled, you can access the Windows 10 administrator permission right now.

Local Group Policy Editor

Part 5: How to Get Administrator Privileges On Windows 10 by Registry Repair

If you lost the administrator registry, you can regain and repair Windows 10 administrator privileges with Registry Repair. Just follow the steps below to fix lost administrator rights and get administrator privileges on Windows 10 again.

Step 1 Boot your Windows 10 computer to the System Recovery mode. Choose Command Prompt. You can see Preparing Command Prompt on your computer’s screen.

Step 2 To access the Registry Editor , type regedit in the Run dialog. Then press the Enter key on your keyboard. Find and highlight the HKEY_LOCAL_MACHINE branch. Choose Load Hive from the File drop-down list.

Step 3 Choose drive followed by Windows, System32 and config to open the System Root folder.

Step 4 Key in SAM . If you can spot the SAM file click to open it, press the Enter key. Name the hive as REM_SAM . Click OK to confirm and load into the HKEY_LOCAL_MACHINE branch.

Step 5 Key into the registry with HKEY_LOCAL_MACHINEREM_SAMSAMDomainsAccountsUsers001F4 . Highlight the 000001F4 key. Find a binary registry DWORD or REG_BINARY named F in the corresponding right window. Double-click on DWORD to open it.

Step 6 Hover the cursor of the binary value box. Put it on the line 38 in the right editor of 11. Press the Delete key on your keyboard. Type 10 and then choose OK . Now you can restart your computer to see if you can log in as an administrator on your computer.

Preparing Command Prompt

Part 6: FAQs of Getting Windows 10 Administrator Permissions

What are full admin rights on Windows 10?

If you enable the full administrator permission, you can full access to Windows system folders, settings, files, and more. All default settings and controls can be customized with your administrator account.

How to give administrator access to a user on Windows 10?

You can give administrator permission to users directly. From the Windows Start menu, choose Settings followed by Accounts . Select the admin account name under Family & other users . Choose the Account Type option. Select Administrator and then OK to create a new administrator account on your Windows 10 computer.

How to delete an administrator account on Windows 10?

If you want to disable the administrator account on your computer, you can go to Family & other users. Choose the Windows 10 administrator account you want to delete. Click Remove and Delete account and data to completely turn off administrator permissions on Windows 10.

All in all, you can get administrator privileges on Windows 10 with or without a password by using the above methods. If you can’t remember what your Windows administrator password is, you can use imyPass Windows Password Reset to reset, change and remove it easily. Thus, you can get an unlocked Windows 10/8/7 computer with ease. You can grant administrator rights and permissions to other users successfully.

More Reading

Can't Login to Windows 10

  • Can’t Login to Windows 10? Here’s How to Fix (100% Workable)

Windows Password Recovery

  • Windows Password Recovery – Recover Forgotten Password in Windows

Bypass Windows 10 Password

  • Windows 10 Password Bypass – Reset Windows 10 Login Password

Hot Solutions

Windows Password

  • Bypass Windows Administrator Password
  • iSumsoft Windows Password Refixer
  • Bypass Windows 10 Password
  • Unlock HP Laptop
  • Bypass Windows 7 Password
  • Free Windows Password Recovery Tools
  • Reset Microsoft Password
  • Reset Windows 8 Password

Fix Windows

  • Unlock Computer Without Password
  • Fix Windows 10 PIN Not Working
  • Delete Defaultuser0 Password on Windows
  • Fix Windows 10 No Login Screen

Password Tips

  • All about Apple iCloud Keychain
  • Change Email Passwords on iPhone
  • Reset Keychain Passwords on Mac
  • What to Do When Forgot Mac Password
  • Manage Passwords on iPhone iPad
  • Top 10 Free Password Managers

Windows Password Reset

Reset Windows Admin/User Account

© 2024 imyPass. All rights reserved.

Stack Exchange Network

Stack Exchange network consists of 183 Q&A communities including Stack Overflow , the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Q&A for work

Connect and share knowledge within a single location that is structured and easy to search.

Can I create an admin privilege for just one application?

A university tries to run our software, but their users don't have admin rights.

However our software requires admin rights to run.

Is there a way to have their system admin create a privilege, just for our software or would this cause a (major) security loophole for their system?

Any other (reasonable) workarounds are welcome too, but changing our software is (sadly) out of the question. This problem occurs in both Windows XP and Vista.

  • administration

Ivo Flipse's user avatar

  • 4 What is it that your app is doing that requires admin? –  Simon P Stevens Aug 5, 2009 at 9:20
  • A similar question (asked later) has more on this Selectively disabling UAC for specific programs on Windows 7 , and here is another one: Can you turn off UAC for a single app? –  Wolf Oct 31, 2016 at 10:20

9 Answers 9

Yes, this causes a major security hole. If you have any bugs that allow arbitrary code execution or spawning of new processes then you have basically given the user full admin rights to the system.

I know you've said you can't change your software but if it's between that and a lost sale I'd strongly consider it, it's really not that hard to not require administrator rights.

What in particular requires the rights? Do you need to write to certain parts of the disk? Do you need raw access to a device? This would help clarify.

Mike McQuaid's user avatar

  • 2 I agree. Your application shouldn't require admin unless it is very very specialised. –  Simon P Stevens Aug 5, 2009 at 9:19
  • The problem only surfaced recently, while the changes causing the need for admin rights were made over a year ago. You're right that it's not hard, however we hope to release a new version in a couple of months, so having to change our "old" software is "unwanted". –  Ivo Flipse Aug 5, 2009 at 9:22
  • What changes and what admin rights do you have? Sure it's unwanted but you've asked if it's a security hole and it is so it would be irresponsible to introduce an attack vector to the university without letting them know. –  Mike McQuaid Aug 5, 2009 at 9:25
  • 2 Also, you didn't say what it was that demanded the rights. You can work around individual issues but giving the application full admin rights is just plain stupid and terrible software development. You'd be getting lynched if you posted this on stackoverflow (which you should have done) –  Mike McQuaid Aug 5, 2009 at 9:26
  • They changed our software to get it working under Vista, where they ran into trouble with the registry and the way Vista would create local databases for each user. However you should understand we have quite a specialized software (< 3000 users) and development is being done in Labview, which doesn't improve things. But I didn't write the software, I'm just trying to find a workaround. If this was asked on SO, the question would be about the reasons why we need admin rights, not a possible solution –  Ivo Flipse Aug 5, 2009 at 9:45

The best way I could thing of would be to use a runas replacement that saves passwords encrypted .. something like supercrypt .

Bruce McLeod's user avatar

  • This seems to be going in the right direction, curious if people have other suggestions like this. –  Ivo Flipse Aug 5, 2009 at 9:10

If the users are part of a domain, you can use a GPO to define a software restriction policy which allows only your application to run. Create accounts for the users and give them local administrator rights to the machines (preferably with this same GPO).

shufler's user avatar

  • 1 +1 - Customized GPO with administrative permissions is the best balance between security and usability in a large network. –  EvilChookie Aug 5, 2009 at 15:16

Take a look at Sudo for windows . It allows you to elevate normal users to admins for the scope of a single application.

I'm not sure if it will entirely work for you though as if you give the user sudo permission I don't think you will be able to stop them elevating other apps of their choice. Might be worth looking at though.

Simon P Stevens's user avatar

Couldn't your software be run inside of a virtual machine or sandbox, e.g. Virtualbox or Sandboxie or ICore Virtual Accounts ?

Either on the user's machines or hosted on a server.

This will not make it any easier to install or to use, but will buy you some time until your software is modified.

Peter Mortensen's user avatar

  • I wonder how sandboxing would handle the database. I'll just give it a try ;-) –  Ivo Flipse Aug 5, 2009 at 13:32

I think that PrivilegeGuard from Avecto should do exactly what you are looking for...it allows you to elevate the rights for a particular windows app, without giving full admin rights to the users. This all can be done for XP, Vista and Win 7.

This is absolutely possible, PowerBroker Desktop: Windows Edition allows you to elevate the rights of specific applications without elevating the user, you can define what additional elevation is given down to the SID(s) involved.

Lazarus's user avatar

I assume you are searching a low cost solution, but if you can't find anything that fits, you could try Universal Shield . It works by restricting access per application and not per user. In terms of security, it's exactly what you need.

beiro's user avatar

i just found this.. http://www.howtogeek.com/howto/windows-vista/create-administrator-mode-shortcuts-without-uac-prompts-in-windows-vista/

I am not sure how suitable it is for a work/school environment. but at home this works for me fine for a small number of admin utilities i use regularly.

ShoeLace's user avatar

This site is temporarily in read-only mode and not accepting new answers.

Not the answer you're looking for browse other questions tagged windows administration ..

  • The Overflow Blog
  • Who owns this tool? You need a software component catalog
  • Down the rabbit hole in the Stack Exchange network
  • Featured on Meta
  • Upcoming privacy updates: removal of the Activity data section and Google...
  • Changing how community leadership works on Stack Exchange: a proposal and...

Hot Network Questions

  • What's the source of John Adams's quote against the two-party system?
  • Newbie: How to identify a chip on a board, what is the best strategy?
  • Can I use references when I am responding to Reviewer in Revisions
  • In how many ways can 6 people be lined up to get on a bus?
  • Is there a name for the widespread logical fallacy in which you prove your point by 'eliminating' anyone who contradicts you?
  • What are advantages of chaos based image encryption methods over simply treating images as opaque bit strings?
  • Is there any performance penalty to unsigned integer underflow?
  • What's the relation between a language being managed and its compiler being reversible?
  • Translating a sentence with a time element into first order logic
  • Could relativity be consistent if there are multiple light-like fields with different invariant speeds?
  • How do I write a sexist narrator without coming off as sexist myself?
  • Divide rubies and diamonds on a necklace into 2 equal halves
  • How to use sed to remove newlines above and below a string?
  • Why explicitly and inexplicitly declarated nodes produce edges with different length?
  • Does or could ChatGPT understand text?
  • Why was the standard distance set to 10 parsec and not simply to 1 parsec?
  • Why does the Falcon 9 first stage perform a burn at 60 km altitude?
  • Why would the triangles join up to a rhombus?
  • Why did nobody ever succeed in "clean room" cloning the Apple Macintosh
  • How are apps selected to be pre-installed
  • Plot cropped unexpectedly when overlaying graphics
  • How do I handle white space in cards with varying amounts of information?
  • Fix Snapping Rotation in Edit Mode
  • Apply different materials to same geo node setup

assigning admin rights windows 10

assigning admin rights windows 10

Top Contributors in Windows 10: Ramesh Srinivasan  -  neilpzz  -  Horace Wiggins  -  franco d'esaro  -  _AW_   ✅

February 14, 2024

Top Contributors in Windows 10:

Ramesh Srinivasan  -  neilpzz  -  Horace Wiggins  -  franco d'esaro  -  _AW_   ✅

  • Search the community and support articles
  • Search Community member

Ask a new question

How to permanently allow admin rights to a program?

Every time I open my computer, i have to manually allow access to CCleaner, it won't do it automatically. 

Also some programs e.g. GTA V launched from steam will not open or update unless steam has been fully shut down and restarted with 'run as administrator'. How do i allow these programs to do this? I have gone through every file in the C: drive for these programs and allow full control to my user without admin and it still hasn't fixed. 

What am i doing wrong?

Report abuse

Replies (2) .

Inactive profile

Thank you for posting your concern here in Microsoft Community and welcome to the Windows 10 Family.

From the description of the issue, I understand that you don't want to be prompted for UAC for a particular program/application.

User Account Control (UAC) was designed for preventing malware executions in PCs, but also to prevent users from doing things wrong (e.g. turn off security features which they should not).

The UAC security feature doesn’t have a “list” and a “black-list” , were trusted programs can be added. The main reason why, the program runs as administrator is because, that program might require doing so, so it can have full access to different directories, or Windows Registry.

The UAC feature is built-in deep inside the Windows Kernel and the Windows Account System.    

So if you do not like the UAC prompts then turn off UAC, or modify the Windows Local Policy Follow the below Steps :     1. Press Windows key +R from the keyboard to open the run Command Dialog Box. Typein : "secpol.msc" and press Enter to open the Local Security Policy .     2. Now expand the Local Policies tree , and click on the Security Options .     3. On the right-side a list of security settings will appear , search for "User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode" .     4. Right-click on it and choose Properties a dialog will appear.     5. In the middle of the dialog, you'll see a comboBox with the default value = "Prompt for consent for non-Windows binaries" .     6. Click on that comboBox and choose "Elevate without prompting" , click Apply and OK          ( Note: This does NOT require a PC reboot).     7. Double click on the program to verify if it works.

Hope the above information was helpful.

Thank You. 

16 people found this reply helpful

Was this reply helpful? Yes No

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

Thanks for your feedback.

Question Info

  • Files, folders, & storage
  • Norsk Bokmål
  • Ελληνικά
  • Русский
  • עברית
  • العربية
  • ไทย
  • 한국어
  • 中文(简体)
  • 中文(繁體)
  • 日本語

This browser is no longer supported.

Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.

How to manage the local administrators group on Microsoft Entra joined devices

  • 24 contributors

To manage a Windows device, you need to be a member of the local administrators group. As part of the Microsoft Entra join process, Microsoft Entra ID updates the membership of this group on a device. You can customize the membership update to satisfy your business requirements. A membership update is, for example, helpful if you want to enable your helpdesk staff to do tasks requiring administrator rights on a device.

This article explains how the local administrators membership update works and how you can customize it during a Microsoft Entra join. The content of this article doesn't apply to Microsoft Entra hybrid joined devices.

How it works

At the time of Microsoft Entra join, we add the following security principals to the local administrators group on the device:

  • The Microsoft Entra Global Administrator role
  • The Microsoft Entra Joined Device Local Administrator role
  • The user performing the Microsoft Entra join

This is done during the join operation only. If an administrator makes changes after this point they will need to update the group membership on the device.

By adding Microsoft Entra roles to the local administrators group, you can update the users that can manage a device anytime in Microsoft Entra ID without modifying anything on the device. Microsoft Entra ID also adds the Microsoft Entra Joined Device Local Administrator role to the local administrators group to support the principle of least privilege (PoLP). In addition to users with the Global Administrator role, you can also enable users that have been only assigned the Microsoft Entra Joined Device Local Administrator role to manage a device.

Manage the Global Administrator role

To view and update the membership of the Global Administrator role, see:

  • View all members of an administrator role in Microsoft Entra ID
  • Assign a user to administrator roles in Microsoft Entra ID

Manage the Microsoft Entra Joined Device Local Administrator role

You can manage the Microsoft Entra Joined Device Local Administrator role from Device settings .

  • Sign in to the Microsoft Entra admin center as at least a Privileged Role Administrator .
  • Browse to Identity > Devices > All devices > Device settings .
  • Select Manage Additional local administrators on all Microsoft Entra joined devices .
  • Select Add assignments then choose the other administrators you want to add and select Add .

To modify the Microsoft Entra Joined Device Local Administrator role, configure Additional local administrators on all Microsoft Entra joined devices .

This option requires Microsoft Entra ID P1 or P2 licenses.

Microsoft Entra joined Device Local Administrators are assigned to all Microsoft Entra joined devices. You can’t scope this role to a specific set of devices. Updating the Microsoft Entra Joined Device Local Administrator role doesn't necessarily have an immediate impact on the affected users. On devices where a user is already signed into, the privilege elevation takes place when both the below actions happen:

  • Upto 4 hours have passed for Microsoft Entra ID to issue a new Primary Refresh Token with the appropriate privileges.
  • User signs out and signs back in, not lock/unlock, to refresh their profile.

Users aren't directly listed in the local administrator group, the permissions are received through the Primary Refresh Token.

The above actions are not applicable to users who have not signed in to the relevant device previously. In this case, the administrator privileges are applied immediately after their first sign-in to the device.

Manage administrator privileges using Microsoft Entra groups (preview)

Starting with Windows 10 version 20H2, you can use Microsoft Entra groups to manage administrator privileges on Microsoft Entra joined devices with the Local Users and Groups MDM policy. This policy allows you to assign individual users or Microsoft Entra groups to the local administrators group on a Microsoft Entra joined device, providing you with the granularity to configure distinct administrators for different groups of devices.

Organizations can use Intune to manage these policies using Custom OMA-URI Settings or Account protection policy . A few considerations for using this policy:

Adding Microsoft Entra groups through the policy requires the group's SID that can be obtained by executing the Microsoft Graph API for Groups . The SID equates to the property securityIdentifier in the API response.

Administrator privileges using this policy are evaluated only for the following well-known groups on a Windows 10 or newer device - Administrators, Users, Guests, Power Users, Remote Desktop Users and Remote Management Users.

Managing local administrators using Microsoft Entra groups isn't applicable to Microsoft Entra hybrid joined or Microsoft Entra registered devices.

Microsoft Entra groups deployed to a device with this policy don't apply to remote desktop connections. To control remote desktop permissions for Microsoft Entra joined devices, you need to add the individual user's SID to the appropriate group.

Windows sign-in with Microsoft Entra ID supports evaluation of up to 20 groups for administrator rights. We recommend having no more than 20 Microsoft Entra groups on each device to ensure that administrator rights are correctly assigned. This limitation also applies to nested groups.

Manage regular users

By default, Microsoft Entra ID adds the user performing the Microsoft Entra join to the administrator group on the device. If you want to prevent regular users from becoming local administrators, you have the following options:

  • Windows Autopilot - Windows Autopilot provides you with an option to prevent primary user performing the join from becoming a local administrator by creating an Autopilot profile .
  • Bulk enrollment - a Microsoft Entra join that is performed in the context of a bulk enrollment happens in the context of an autocreated user. Users signing in after a device has been joined aren't added to the administrators group.

Manually elevate a user on a device

In addition to using the Microsoft Entra join process, you can also manually elevate a regular user to become a local administrator on one specific device. This step requires you to already be a member of the local administrators group.

Starting with the Windows 10 1709 release, you can perform this task from Settings -> Accounts -> Other users . Select Add a work or school user , enter the user's UPN under User account and select Administrator under Account type

Additionally, you can also add users using the command prompt:

  • If your tenant users are synchronized from on-premises Active Directory, use net localgroup administrators /add "Contoso\username" .
  • If your tenant users are created in Microsoft Entra ID, use net localgroup administrators /add "AzureAD\UserUpn"

Considerations

  • You can only assign role based groups to the Microsoft Entra Joined Device Local Administrator role.
  • The Microsoft Entra Joined Device Local Administrator role is assigned to all Microsoft Entra joined devices. This role can't be scoped to a specific set of devices.
  • Local administrator rights on Windows devices aren't applicable to Microsoft Entra B2B guest users .
  • When you remove users from the Microsoft Entra Joined Device Local Administrator role, changes aren't instant. Users still have local administrator privilege on a device as long as they're signed in to it. The privilege is revoked during their next sign-in when a new primary refresh token is issued. This revocation, similar to the privilege elevation, could take upto 4 hours.
  • To get an overview of how to manage devices, see managing device identities .
  • To learn more about device-based Conditional Access, see Conditional Access: Require compliant or Microsoft Entra hybrid joined device .

Coming soon: Throughout 2024 we will be phasing out GitHub Issues as the feedback mechanism for content and replacing it with a new feedback system. For more information see: https://aka.ms/ContentUserFeedback .

Submit and view feedback for

Additional resources

IMAGES

  1. windows 10

    assigning admin rights windows 10

  2. How to add adminstrator rights using command prompt Windows 10

    assigning admin rights windows 10

  3. How to Get Administrator Privileges on Windows 10 (4 Methods)

    assigning admin rights windows 10

  4. How To Get Administrator Privileges On Windows 10

    assigning admin rights windows 10

  5. How To Get Administrator Privileges On Windows 10 (4 Methods)

    assigning admin rights windows 10

  6. How to Get Administrator Privileges on Windows 10 (4 Methods)

    assigning admin rights windows 10

VIDEO

  1. LAB 5 ASSIGNING IP ADDRESS IN WINDOWS 2012 SERVER

  2. windows admin center created user, group, create shared and add share permission

  3. Adding Admins to your Project Website or Funnel

  4. Enable Built in Hidden super Administrator account on windows 10, 8.1 and 7

  5. How to Manually Assigning a Drive Letter Using CMD / Diskpart in Windows 11/10 [Solved] #diskpart

  6. Assign/Remove Permission Set To User In Salesforce

COMMENTS

  1. Assigning administrator permission for an User Profile in Windows 10

    Assigning administrator permission for an User Profile in Windows 10 - Microsoft Community Ask a new question AU A. User Created on February 10, 2016 Assigning administrator permission for an User Profile in Windows 10 Original title: Administrator Question How do you change the administrator that was mis-assigned in WIN 10? This thread is locked.

  2. How to Change a User Account to Administrator on Windows 10 and 11

    When the User Accounts Control prompt shows up, select "Yes." From the "User Accounts" window, select the account that you want to upgrade from user to administrator and select "Properties." Head to the "Group Membership" tab on the window that pops up. Select "Administrator," and then choose the "OK" button.

  3. Give Admin Permission/Rights to User in Windows 11/10

    net user To give admin rights to a user account, use the following command. Note: Replace "UserAccount" with the actual name of the user account that you want to give admin rights to. The following command will add the specified user account to the administrator group, thus granting full administrator rights to the user account.

  4. How to Enable or Disable Administrator Accounts in Windows 10

    For speed, you can use the command prompt method, which will disable the administrator account in Windows 10 in just three steps: Log out, and then log back in using your own account. Open a ...

  5. 6 ways to change an account to Administrator and back in Windows 10

    To change an account's type to Administrator, the command you must enter is: Add-LocalGroupMember -Group "Administrators" -Member "NAME". Replace NAME with the name of the promoted user, as we did in the following image. The command to return the account to Standard privileges is similar:

  6. How To Get Administrator Privileges On Windows 10

    The fastest method to grant your account administrator permissions on a Windows 10 PC is via Accounts Settings. Here are the detailed steps… Right-click the Windows 10 Start menu and click Settings. Then, on the Windows Settings screen, click Accounts. On the left pane of Your info screen, click Family & other users.

  7. User Rights Assignment

    You can configure the user rights assignment settings in the following location within the Group Policy Management Console (GPMC) under Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment, or on the local device by using the Local Group Policy Editor (gpedit.msc).

  8. How To Change The Administrator On Windows 10

    Click Start > Settings and select Accounts. Click Family & other users. Click on the user account and select Change account type. Select the Administrator account type and then click OK. Restart your computer to effect the change and start using the account with the administrator privilege level.

  9. Create and Manage User Accounts and Privileges in Windows 10

    When you want to change the privilege of an account, sign in to an Administrator account, open Family & other people in Settings. Select the account then click Change account type. Click on the...

  10. Change User Rights Assignment Security Policy Settings in Windows 10

    1 Press the Win + R keys to open Run, type secpol.msc into Run, and click/tap on OK to open Local Security Policy. 2 Expand open Local Policies in the left pane of Local Security Policy, and click/tap on User Rights Assignment. (see screenshot below step 3)

  11. How to Change Administrator on Windows 10 : HelloTech How

    First, type Control Panel in the Windows search bar. Click on the app in the search results. Then click on Change account type under the User Accounts section. Click on the user that you want to change. Then choose Change the account type. Choose the radio button next to Administrator. Click on Change Account Type.

  12. How to Change a User to an Administrator in Windows 11 or Windows 10

    Press Start and type "Computer Management", then click the top result. Open "Local Users and Groups" in the sidebar and double-click "Users" in the main pane. Double click the user you ...

  13. Create a local user or administrator account in Windows

    Select Start > Settings > Accounts . Under Family & other users, select the account owner name (you should see "Local account" below the name), then select Change account type.

  14. Change A Standard User Account To An Admin Account In Windows 10

    Make sure you've already added the account you want to assign admin rights to. Open the Settings app and go to the Account group of settings. In the 'Family & other users' tab, scroll down to the 'Other users' section where the accounts you've added will be listed. Click the account you want to change the type of and click 'Change ...

  15. How To Give Admin Rights To User Account on Windows 10

    Easy to follow tutorial on giving a user account on Windows 10 admin rights to make changes to the PC! Learn how to give any user account admins powers on Wi...

  16. How to set up Assigned access on Windows 10 to ...

    Use the Windows key + I to open the Settings app. Click Accounts. Click Family & other people. Under Other users, click the Set up assigned access link. Click the Choose an account button, and ...

  17. Configuring user access control and permissions

    Open the Local Users and Groups tool and navigate to the Groups tab. Select the Windows Admin Center Readers group. In the Details pane at the bottom, select Add User and enter the name of a user or security group that should have read-only access to the server through Windows Admin Center.

  18. Tutorial to 5 Ways to Get Windows 10 Administrator Privileges

    Create a new administrator account without a few clicks. Reset Windows system password and regain the locked system. Compatible with Windows 10/8.1/8/7/Vista/XP/NT/etc. and almost all file disks and hard disks. Intuitive interface with easy-to-use options. Free Download

  19. windows

    2. If the users are part of a domain, you can use a GPO to define a software restriction policy which allows only your application to run. Create accounts for the users and give them local administrator rights to the machines (preferably with this same GPO). Share. Improve this answer.

  20. How to permanently allow admin rights to a program?

    Follow the below Steps : 1. Press Windows key +R from the keyboard to open the run Command Dialog Box. Typein : "secpol.msc" and press Enter to open the Local Security Policy. 2. Now expand the Local Policies tree, and click on the Security Options. 3. On the right-side a list of security settings will appear, search for"User Account Control ...

  21. How to manage local administrators on Microsoft Entra joined devices

    Manage administrator privileges using Microsoft Entra groups (preview) Starting with Windows 10 version 20H2, you can use Microsoft Entra groups to manage administrator privileges on Microsoft Entra joined devices with the Local Users and Groups MDM policy. This policy allows you to assign individual users or Microsoft Entra groups to the local administrators group on a Microsoft Entra joined ...