Admin Issue Needs Correcting

Question

Hi

How do I fix the issue as pictured below?

Admin DefaultAccount should say LaShawn, not defaultuser0

Guest should not be LaShawn as LaShawn should be Admin as mentioned above

When I start up my computer, I'm given the option of two accounts: Administrator or LaShawn

I login as LaShawn. However, I am able to login as Administrator also.

When I go into the Control Panel, User Accounts my LaShawn account is listed as Admin but when I try to use the CMD function I'm told Access Denied. So I assume it's because my account is listed as Guest, as above, despite being shown as Admin (below). 

How do I rectify this? thanks

Answer 1

Ok, those commands completed successfully. How do I remove the spare account now?

The reason I assumed my account was listed as Guest is because in the first screen shot (showing net user command) I read from left to right like most normal people and it said, Guest.....LaShawn...Wgadutility. I assumed they were related as they were all on the same line. I guess common sense doesn't apply to whoever programmed it.

Still doesn't answer my question as to why I was denied access, as in the last screen shot.

Answer 2

OK, things are becomin a little clearer:

• You have two accounts with admin privileges: Administrator and LaShawn.
• Your report does not say whether the Administrator account is active.
• Having a single active admin account is as short-sighted as having a single house key. Sooner or later you mislay or lose your house key. Sooner or later something goes wrong with your single admin account, e.g. a forgotten password. This would put you into a very awkward situation.
• There could be several reasons why you were denied access to sc.exe. To find out if the LaShawn account has admin privileges, open an elevated command prompt and type these commands:

net  user  Spare  123456  /add

net  localgroup  administrators  Spare  /add

The commands would create the admin account "Spare" with a password of 123456. You can run these commands only if you have admin privileges.

In your first post you wrote "**So I assume it's because my account is listed as Guest, as above, despite being shown as Admin (below)". I cannot understand what makes you think that your account should be listed as Guest.

Answer 3

Ok, thanks. I figured I should only have one account with admin access ??? but if it's not going to complicate things further then I guess it doesn't matter. When I got the message I was trying to disable the update service temporarily and felt that if I was admin correctly I should've been able to. Screenshot is below. Maybe I did it wrong ... or can't do it ...

Answer 4

Hi faulkwood,

net user simply lists the users it does not tell you what type of account it is.

Administrator is the built in administrator account, the default is inactive but seems to be active on your computer

Guest is the built in Guest account, the default is inactive but still exists as a user

Default user contains the details used when you set up a new user account

Defaultuser0 is left over from original setup, windows should have removed it (bug) but it cannot be used anyway.

WDAGutilityAccount is used by windows defender application guard.

to turn off the default administrator account (so that it does not appear on the logon screen and cannot be used, unless you turn it on again)

right click on start and select command prompt admin

type net user administrator /active:no

press enter.

as for the access denied, could you give more details

what are you trying to achieve when you see the message?

is there any other information in the message or is it simply access denied?

Answer 5

I think there is a lot of confusion here. To remove it, please do this:

• Post the output of this command:

net localgroup administrators

• State the command you use when you get the "Access denied message".
• Post a snapshot of this message.