Built-in Administrator account is missing from my Windows 11 Pro system

Question

The built-in Administrator account is missing from my system.

---

Microsoft Windows Version 10.0.26100.4652 Microsoft Corporation. All rights reserved.
C:\Windows\System32>net user
User accounts for JIM-DESKTOP
DefaultAccount Guest Jim
WDAGUtilityAccount WsiAccount
The command completed successfully.

C:\Windows\System32>net user administrator /active:yes
The user name could not be found.
More help is available by typing NET HELPMSG 2221.

C:\Windows\System32>

How do I get it back?

Answer 1

You can try this.

Create a System Restore Point.

Download add_admin.reg and save it to the C:\ root.

Boot into WinRE and run:

reg load HKLM\SAM2 H:\Windows\System32\Config\SAM

regedit.exe

Import add_admin REG file using the File → Import option.

Close Regedit.

Run:

reg query HKLM\SAM2\SAM\Domains\Account\Users\000001F4 >H:\sam_dump.txt

reg unload HKLM\SAM2

Post the output.

Answer 2

Glad that helped.

You can check the status of the account by running the following from Command Prompt after booting into Windows:

net user administrator

wmic useraccount get name, sid

Also, follow up with a full system scan using ESET Online Scanner or Kaspersky Virus Removal Tool.

Answer 3

Thank you very much for reaching out! As an Independent Advisor and fellow Microsoft user, I'm more than happy to assist you.

Have you deleted it accidentally by any chance? Please try the steps below:

1. Boot into Safe Mode and Attempt Activation
   • Restart your PC while holding the Shift key, then select Restart from the login screen.
   • Navigate to Troubleshoot > Advanced options > Startup Settings > Restart.
   • After restart, press 4 or F4 to boot into Safe Mode.
   • Once in Safe Mode, open Command Prompt as administrator (search for "cmd" and run as admin).
   • Run net user to list accounts again—check if "Administrator" appears.
   • If it does, enable it with net user Administrator /active:yes (note the capital 'A'—commands are case-sensitive).
   • If successful, restart normally and sign in as Administrator (it has no password by default; set one with net user Administrator *).
   • To disable later for security, use net user Administrator /active:no.
   If the account still isn't found, proceed to the next solution.
2. Re-Enable via Registry Edit Registry edits can cause issues if done incorrectly. Make sure to create a system restore point first via Settings > System > About > Advanced system settings > System Protection.
   • Boot into Safe Mode or the Windows Recovery Environment (hold Shift during restart, then Troubleshoot > Advanced options > Command Prompt).
   • In the Command Prompt, type regedit and press Enter to open the Registry Editor.
   • Select the HKEY_LOCAL_MACHINE key, then go to File > Load Hive.
   • Navigate to C:\Windows\System32\config (replace C: with your system drive if different), select the SAM file, and open it.
   • Name the loaded hive something like "REM_SAM" and click OK.
   • Navigate to HKEY_LOCAL_MACHINE\REM_SAM\SAM\Domains\Account\Users\000001F4.
   • Double-click the F value on the right. In the data, go to line 0038, change the value from "11" to "10" (this re-enables admin status).
   • Click OK, then go to File > Unload Hive to save changes.
   • Exit Registry Editor and restart your PC.
   • After reboot, run net user Administrator /active:yes again to activate.

Let me know if you're still having trouble.

Answer 4

Boot into WinRE Command Prompt and run this command:

bcdedit | find "osdevice"

Note the OS partition's drive-letter. Suppose it's D:\

Run:

copy D:\Windows\System32\Config\SAM D:\SAM.bak

reg load HKLM\SAM2 D:\Windows\System32\Config\SAM

reg query HKLM\SAM2\SAM\Domains\Account\Users\Names

reg query HKLM\SAM2\SAM\Domains\Account\Users

reg unload HKLM\SAM2

Post the output.

Answer 5

Please run the following command and post the output.

wmic useraccount get name, sid