Partager via


Built-in Administrator Account Disabled

In Windows Vista we made numerous changes to our user account model. Standard users are now the default user type for new accounts created after initial setup. The Power Users group is effectively deprecated. In addition, we’ve made it much easier to run as a standard user and even administrators run with limited Windows privileges and user rights by default. But people often ask us, “What about the built-in administrator account? Isn’t it a security risk to have an administrator account with no password?” Yes, in some cases this administrator account could be used to circumvent other security mechanisms. For example, parental controls could not be effective if the child could simply login with the built-in administrator account and do whatever they want, including disabling the Parental Controls.

In Windows Vista RC1 we will have completed a series of changes to disable the built in administrator account under most circumstances. These changes apply to the default administrator account named Administrator, which is created during setup.

  • The built-in administrator account is disabled by default in Windows Vista on new installations.
  • If Windows Vista determines during an upgrade from Windows XP that the built-in Administrator is the only active local administrator account, Windows Vista leaves the account enabled and places the account in Admin Approval Mode. The built-in administrator account, by default, cannot log on to the computer in safe mode. Please see the following sections for more information.
  • On non-domain joined computers, when there is at least one enabled local administrator account, safe mode will not allow logon with the disabled built-in administrator account. Instead, any local administrator account can be used to logon. If the last local administrator account is inadvertently demoted, disabled or deleted, safe mode will allow the disabled built-in administrator account to logon for disaster recovery.
  • On domain joined computers, the disabled built-in administrator account cannot logon in safe mode. By default a user account that is a member of the Domain Admins group can log on to the computer to create a local administrator if none exists. If the domain administrative account had never logged on before, then the computer must be started in Safe Mode with Networking since the credentials will not have been cached. Once the machine is disjoined, it will revert back to the non-domain joined behavior depicted previously.

Be aware that disabling the built-in administrator account means that it is important that you do not forgot the user name and passwords for the other administrator accounts on that PC. If you do, you may end up a in a situation where you are unable to make further admin changes to your PC—or even event not be able to login at all. To make sure that happens we recommend the follow tips for home users:

  • Use the Forgotten Password wizard via the User Accounts Control Panel to create a password reset disk for your account. Store this disk or removable USB device in a safe place.
  • Create a password hint for your account.
  • Write down your username and password and store it in a safe location.

Note: as we move closer to RTM we will be posting another related blog to address the built-in administrator management in the enterprise.

Darren Canavor, Program Manager, Windows Security Core

Comments

  • Anonymous
    August 27, 2006
    GREAT !!! Good ideas !!!

  • Anonymous
    August 28, 2006
    Darren,

    How about simple administrative tasks such as "ipconfig /release"? If even the user created during Vista setup does not have enough local administrative rights*, and with this new "thinking" where the built-in local administrator account (Administrator) cannot be used to start a new command-prompt, how can this task be even possible?

    In addition, how can the password for the default built-in "Administrator" account be changed (since a user will not be prompted to save it offline as it is -blank- by default anyway)?

    Thanks for the clarification, Darren!


    Situation: standalone, workgroup, non-domain Vista machine

    * even though s/he is a member of the local administrators group in Vista

  • Anonymous
    August 28, 2006
    I would like that a second Standard account is mandatory i.e. after the creation of the first Protected Administrator, the wizard will force the user to create a Standard account protected by UAC and invites to use it as main account for everyday tasks.

  • Anonymous
    August 28, 2006
    Hi,

    Well in Vista build 5563 the account is NOT password protected by default. Why not have it by default protected with a password? That is with the same password as the first user you create during Vista setup.

    Take Care,

    Will

  • Anonymous
    August 28, 2006
    組み込みの Administarator アカウントは、無効化される

  • Anonymous
    August 29, 2006
    組み込みの Administarator アカウントは、無効化される

  • Anonymous
    August 29, 2006
    組み込みの Administarator アカウントは、無効化される

  • Anonymous
    August 30, 2006
    The comment has been removed

  • Anonymous
    August 30, 2006
    The comment has been removed

  • Anonymous
    August 30, 2006
    Yes Will you are correct.  We decided to go this way for several reasons, one of the biggest being that a large amount of our consumer customers (non-domain joined) like the convenience of not having a password –my mother uses autologon and has never seen a password screen.  In that scenario by default we apply security policies. I.e. 1) No Terminal Services with blank password.  2) No remote connections with blank password.   Also note that users often choose weak passwords and without enforcing password complexity I don’t know how we would make your suggestion possible.

  • Anonymous
    August 30, 2006
    Hi,

    Well, I see...

    So yes I recommend enforcing password complexity from the get go. :)

    But yes I see your point and agree... But I think it's time Microsoft gives security more weight in this case then luxury. ;) Yes even with client OS. And yes I understand Vista is not a server OS...

    But still in my opinion anyways...

    It's time Microsoft takes a stand on security and does what is best for the home user, when it comes to security. The average home user has no clue about security and could care less. They just want it to work.

    In your example would it not be better to have a secure password but login automatically, via the likes of tweakUI ? This way autologin still works but at least the account is password protected. Of course this would not stop someone from logging into your account since it autologins, but it does protect your account and UAC of course asks for the PW to do admin events so they have to have the admin pw to do anything bad anyways. Of course I am assuming the user is a normal user which a home user should be.

    And speaking of... Why then when you install vista and create an account it is an admin account? Why force two admins account.? Lost passwords? That should be at the responsibility of the user. You should not require two admins accounts. And besides that is what the lost password feature is for, correct? So during setup, you should be creating a normal user account. Now you have to create another account to create a normal user and then use it. Most users will have no idea about that and will just create a single user during setup which of course is an admin account (second one, the first is the build in administrator account) and will continue to use it as such. Big mistake in my eyes! :(

    Well that is how I feel about the matter.

    Take Care,

    Will

  • Anonymous
    August 31, 2006
    The comment has been removed

  • Anonymous
    August 31, 2006
    I just noticed these blog posts related to Windows Vista security that may interest y'all.
    Built-in...

  • Anonymous
    September 01, 2006
    The comment has been removed

  • Anonymous
    September 03, 2006
    wrt. "I have a question regarding this behavior.  What will happen when the last administrator account is locked out (such as by failed logon attempts)?  Will the built-in administrator account be accessible after the other local admin is locked? "

    No the administrator account will not automatically unlock if the “other” administrator account is inadvertently locked out.  By default on non-domain joined computers we do not set the account lock out policy, however we do set a “pause delay” after 5 failed logon attempts.
    Note:  When a user opts into setting a password we provide two mechanisms to help in password retention. First is the Forgotten Password Wizard which walks the user thru saving their password to external media and secondly are Password Hints, phases used to remember the password.
    Remember: at the end of the day your computers local and remote protection requirements are a function the environment in which you compute.

  • Anonymous
    September 03, 2006
    wrt. "So, when you say "Domain Admins", do you mean that group specifically, or any Domain user account that is a member (directly or indirectly) of the local Administrators group?"


    My statement was only an iteration of the default behavior, not intended to be guidance.  The example was used to bring focus to the issue of SAFEMODE with Network in the advent of no cached credentials.  Sorry for the confusion.

  • Anonymous
    September 04, 2006
    The Vista Security Blog has a bunch of new posts about RC1 including;  Built-in Administrator Account...

  • Anonymous
    September 04, 2006


    本文主要内容翻译自,纯属研究,谢绝转载。Built-in Administrator Account DisabledDarren Canavor, Program
    Manager, Windows...

  • Anonymous
    September 05, 2006
    "If Windows Vista determines during an upgrade from Windows XP that the built-in Administrator is the only active local administrator account, Windows Vista leaves the account enabled and places the account in Admin Approval Mode. The built-in administrator account, by default, cannot log on to the computer in safe mode. Please see the following sections for more information."

    You guys really need to do something about this.
    Why do you have to make it different from XP to Vista upgrade built-in administrator enable when 1 account is active and New installations(clean install) Vista built-in administrator disabled. maybe on installation you can ask user if you they would like to transfer all data on the new created Vista standard account (recomended) and that built-in administrator will be disabled. Vista Upgrade and New installation of vista should be the same to make it easier for people who made a transition from XP to vista.

    Does this mean that i will have to install Vista uprade on the 2nd XP administrator just for the built-in Administrator disabled on  XP MCE 2005 Because seriously I'm tired of watching that account on XP. Will XP user who upgraded to Vista have a choice to disable the built-in account? how simple is it to do?

  • Anonymous
    September 07, 2006
    I think got gave you your bodies to play with. So don't mess with our nerves.

  • Anonymous
    September 07, 2006
    The comment has been removed

  • Anonymous
    September 08, 2006
    If Vista is going to disable the built-in administrator account by default, why not just eliminate the built-in administrator account alltogether.  In my opinion, the installer of the OS should be the one who picks the logon name of an administrator user and thus a common admininstrator account will be less known.  At least one administrator account must exist in order to perform an installation.

  • Anonymous
    September 08, 2006
    The comment has been removed

  • Anonymous
    September 09, 2006
    I am glad to see the built in administrator account disabled.  Since, everyone I know uses custom built desk top pc's for development, the Old Windows Vista was a pain, since one had to switch back to accomplish simple every day task.  We all had disabled all accounts except for our accounts on our personal pc's and Vista still has problems.  So we gave up testing and will not use Vista until a version comes out for users whose machine is used for many tasks and there are no kids for parental controls.

    If we cannot find a satisfying version of Vista we are exploring other OS's to see what our next move will be when Microsoft no longer supports XP Professional.

  • Anonymous
    September 10, 2006
    Ted, can you explain more about what the problem is you are having with Windows Vista? I am not sure what you mean by, "since one had to switch back to accomplish simple every day task"

    - Alex

  • Anonymous
    September 12, 2006
    I wanted to copy a .pst from my old PC to a Vista PC where the .pst files reside. Because of all the restrictions, I had to change permissions on the folders. Remembering what folders I changed became a bit of a problem after the fact. (security risk) In my opinion a administrator profile is important feature to have when certain tasks need to be performed. During an unsucessful attempt to install netmeeting, I enabled the administrator account. Information is available on the web to enable the account.

  • Anonymous
    September 13, 2006
    ура

  • Anonymous
    September 13, 2006
    ура 1

  • Anonymous
    September 26, 2006
    Darren Canavor, Program Manager on the UAC team has made a post on the Windows Vista Security blog about

  • Anonymous
    September 27, 2006
    The comment has been removed

  • Anonymous
    October 05, 2006
    can you help me? i did a upgrade from beta to rc1 i have 4 users, i was the first users so it put me as administrator. on the inital install, does this me now that i am not a administrator any more since i upgraded to rc1?  also can you tell me why i cannot open certain folders, they have a arrow next to their icon? and how can i get around that.  like my documents for example, it would not let me open it till i played with some settings, but my local files folder will not allow me to open it, and i can't change the permissions... is there a page or someone who could walk me through this? you may e-mail me at the following!! glynnsoileau@bellsouth.net any help will be greatly appreciated....

  • Anonymous
    November 22, 2006
    The comment has been removed

  • Anonymous
    December 07, 2006
    The comment has been removed

  • Anonymous
    December 14, 2006
    after i installed vista, the first time i got to the log on screen (to select your name) is said other user, but its asking for a user name and password, what do i do???

  • Anonymous
    December 20, 2006
    "If Windows Vista determines during an upgrade from Windows XP that the built-in Administrator is the only active local administrator account, Windows Vista leaves the account enabled and places the account in Admin Approval Mode. The built-in administrator account, by default, cannot log on to the computer in safe mode." My Administrator account was the only active local admin acount and I am still locked out - tried booting into safe mode but it won't do that - can't log on at all - any ideas?

  • Anonymous
    December 21, 2006
    I loaded Vista on top of Windowx XP. My scenario is this: On XP, I had Lenovo Thinkpad software that communicated with the embedded security chip. The software managed my passwords. So for the 3 months, I have been keying in a different password into the manager which would in turn, issue the stored password into Windows XP. Now that Vista has been loaded, it is asking me for that originally stored password. By the time I figured it out, I started getting sa message that my account had been disabled. I can login via safe mode (as you explained above) but I do not have the privs to enable my admin account. It will not let me create an account either. What do I need to do to fix this...

  • Anonymous
    December 27, 2006
    The comment has been removed

  • Anonymous
    December 29, 2006
    Hello Pookie, Congratulations!

  • Anonymous
    January 08, 2007
    I worked with your tech support to solve a  1-Care (Vista Beta release) problem via email.  I was told to make some changes in "Safe-Mode" boot-up..... which of course is impossible with the current state of my XP / Vista conversion and my defaulted "Administrative Rights".  This is a poor state of affairs for MS support. Also, I currently discovered that I am also unable to adjust back-up routines... and in fact the One Care / Ultimate back up routines are not functional at this time.  Even though I brought and paid for this computer - I do not have the administrative keys to delete old back-ups from an external hard drive in order to free up space to do new ones.

  • Anonymous
    January 15, 2007
    I upgraded to Vista from XP.  My original installation of XP created an admin account which I never used.  I ALWAYS used the administrator account and now the account is disabled and the account I never used at all is the only one I have access to.  Long and short of it here is that now I don't have my email account, internet shortcuts etc, etc, ad-nauseum. HOW do I either reactivate the damb account so I can export all this information or extract it with the other account. I understand fully the reasoning behind getting rid of the old built in administrator account, but it would have been nice if the install had offered one the chance to import the settings into a new account or a designated account, not just sprung the change with no warning...

  • Anonymous
    January 21, 2007
    The comment has been removed

  • Anonymous
    January 22, 2007
    I installed a fresh copy of Windows Vista business version 6000. not a beta. When I joined my computer  to a domain whose administrator I am not my administrator account got locked. I can only log in with my domain user account. how can I have my administrator account back. I will be highly obliged .

  • Anonymous
    January 24, 2007
    I did a fresh install of Vista and now I am unable to add the machine to our NT4 domain.  I get the following error message: Login Failure: wrong username or password We have tried adding the account using the a domain admin and the domain administrator and still get the same message. Help

  • Anonymous
    January 26, 2007
    The comment has been removed

  • Anonymous
    January 26, 2007
    I CNT GET INTO THE USER TO REMOVE THE NAMES I DONT WONT. ON THIS COMPUTER. I DONT REALLY KNOW HOW TO FIRS TIME USEING A COMPUTER. SO EVERYTHING HARD FOUR ME RIGHT NOW.

  • Anonymous
    February 02, 2007
    Ok I understand WHY the built-in Administrator is disabled. My question is  how do I ENABLE it? Is there anyway to 'change the way users logon' so that they have to type the name and not use Icons? (Like XP).

  • Anonymous
    February 09, 2007
    Hi i have purchased a notepad some days back and I was doing some work suddenly a blue screen appeared and i immediately rebooted it then it is asking me a password and I could not login to my account.

  • Anonymous
    February 13, 2007
    The comment has been removed

  • Anonymous
    February 22, 2007
    The comment has been removed

  • Anonymous
    February 22, 2007
    and the admin account is disabled even in safe mode...

  • Anonymous
    February 23, 2007
    The comment has been removed

  • Anonymous
    February 27, 2007
    The comment has been removed

  • Anonymous
    March 01, 2007
    The comment has been removed

  • Anonymous
    March 03, 2007
    I have a problem with installing adobe premier and some other programs as vista keeps stating that this must be done from the administrator account.  How can I do this?

  • Anonymous
    March 06, 2007
    The comment has been removed

  • Anonymous
    March 06, 2007
    oh and I just turned guest accounts off after turning them on and loggin in as a guest....now i'm back to my only other admin account and i don't even have permission to delete the Guest profile folder.....why? do the Guests outrank my so-called "admin" priveleges or is someone (i.e. Microsoft) telling me I can't? in XP, the local admin was bad purely because of the standard SID....but for vista the account exists just disabled, so the SID is still there but it's disabled such that remote attacks can't readily utilize the account....the account seems like a placeholder for Microsoft to get its foot in the door of every home by creeping into PCs (seeing as how their account has more power than mine on my own computer)

  • Anonymous
    March 07, 2007
    The comment has been removed

  • Anonymous
    March 09, 2007
    The comment has been removed

  • Anonymous
    March 11, 2007
    The comment has been removed

  • Anonymous
    March 11, 2007
    mmm.. nice design, I must say..

  • Anonymous
    March 12, 2007
    We have been getting several calls from customers who are unable to uninstall our product because they are running their Vista machine in the Administrator (disabled by default) account. When you try to uninstall in the admin account a message appears asking the user to login as an administrator.  Do you know why this might be happening and what we can do to fix the problem? The uninstall works fine  in a user/admin account.

  • Anonymous
    March 12, 2007
    I would also like to mention that I have been testing with Vista for several months now. In the last few weeks my user profile has become corrupted and when I login to the operating system it goes black. The MIS department was able to recover the account through a backup or by copying everything to a new profile. Why is the windows explorer and user profiles becoming corrupted so easily on Vista?

  • Anonymous
    March 16, 2007
    The comment has been removed

  • Anonymous
    March 19, 2007
    Chi ha fatto questo? E un buon posto per trovare le informazioni importanti!:)

  • Anonymous
    March 21, 2007
    if i really wana add password on my administrator (i.e auto disabled in Vista), then what should i do ? and if i wana use my group police editor then what should i do in vista? have i use any other tweak for it, or can i do it my self through group police ?

  • Anonymous
    March 21, 2007
    This is a big problem for Home premium users.  there are bugs on the system that when installing some software, such as Windows Live Messenger, the O.S. tells you that you are not an administrator, even though you clearly set up the user account as an administrator.

  • Anonymous
    March 24, 2007
    The comment has been removed

  • Anonymous
    March 25, 2007
    I am unable to register some software whilst being logged in as an administrator on uac , i have tried to use one of the methodsabove but do not have the option to select local users and groups its not there ? HELP ?

  • Anonymous
    March 25, 2007
    well i cracked it , deactivated uac , set software to run on xp rebooted , bobs your uncle !!!!

  • Anonymous
    March 25, 2007
    well i cracked it , deactivated uac , set software to run on xp rebooted , bobs your uncle !!!!

  • Anonymous
    March 26, 2007
    The comment has been removed

  • Anonymous
    March 27, 2007
    The comment has been removed

  • Anonymous
    March 31, 2007
    Here's a problem. I upgraded from XP to Vista a few hours ago. The only account on the XP computer was the Administrator account. The administrator account, the only account on the computer, is now disabled. I am completely locked out of my brand new Vista Machine. What do I do now?

  • Anonymous
    April 02, 2007
    The comment has been removed

  • Anonymous
    April 02, 2007
    The comment has been removed

  • Anonymous
    April 02, 2007
    Respected Sir,      how to disabled a Administrator password or what is the default password in windows vista os (Dell Laptop) can any one solve my problem. Waiting for earliest reply. SANDESH SAKPAL

  • Anonymous
    April 04, 2007
    This ridiculous behaviour can easily be hacked out of Vista via a few registry key additions.  Then you have an Adiministrator account that you can log onto in both standard AND safe modes... ...and yes it does also work on the Home edition. Try Googling "vista enable administrator"

  • Anonymous
    April 06, 2007
    I am using windows vista home premium. I am TOTALLY unhappy with the whole experience. From the login screens (I got the Ctrl-Alt-Del to show but I can't get the user names not to show) to the admin password situation discussed here, to the sharing of files ONLY in the public folder, to the way to connect to other computers in a home workgroup situation. I successfully connected to a windows XP pro system, but, no matter what I do, it won't connect to a w2k system. It seems that a first requirement for windows vista design was to make it as illogical and as incompatible with other systems as possible

  • Anonymous
    April 06, 2007
    I am using windows vista home premium. I am TOTALLY unhappy with the whole experience. From the login screens (I got the Ctrl-Alt-Del to show but I can't get the user names not to show) to the admin password situation discussed here, to the sharing of files ONLY in the public folder, to the way to connect to other computers in a home workgroup situation. I successfully connected to a windows XP pro system, but, no matter what I do, it won't connect to a w2k system. It seems that a first requirement for windows vista design was to make it as illogical and as incompatible with other systems as possible

  • Anonymous
    April 06, 2007
    Oh. I forgot to tell you. I have been using computers since 1971 and, though I am not a PhD in rocket Science, I am a PhD. As Frank said a few lines above, what MS has done is a crime and shows how utterly arrogant Gates and his cackle are.

  • Anonymous
    April 08, 2007
    how to ture on my aministrative

  • Anonymous
    April 11, 2007
    Thanks but I am just trying to get an administrator.

  • Anonymous
    April 11, 2007
    Thanks but I am just trying to get an administrator.

  • Anonymous
    April 14, 2007
    I no longer own my own PC. I'm not a happy camper.

  • Anonymous
    April 15, 2007
    E grande io ha trovato il vostro luogo! Le info importanti ottenute! ))

  • Anonymous
    April 16, 2007
    the built in administrator account can be used on windows vista. i  have found a way to enable it.   email    rusty.j.risner@us.army.mil

  • Anonymous
    April 16, 2007
    if anyone is looking for a way to enable the administrator account in windows vista call em at 931-540-8065  or email me at rusty.j.risner@us.army.mil  or  rusty.risner@dielectric.spx.com

  • Anonymous
    April 16, 2007
    you can log on using the built in administrator without safe mode.  i spent a little time exploring with windows vista and i figured it out in about 30 minutes. the administrator can be enabled. in less then one minute. just email me and i will tell u how. rusty.j.risner@us.army.mil

  • Anonymous
    April 30, 2007
    why don't you post the solution here oh obin-wan?

  • Anonymous
    April 30, 2007
    rather, why don't you post the solution here oh obi-wan (person who posted that he has a solution above)...

  • Anonymous
    May 09, 2007
    Please tell me how to get built in admistrator enabled? How to get the adminstrator rights in windows vista? Because I am not able to download the updates from Microsoft website.. It is asking for adminstrator rights.. Please someone help me in this regard..

  • Anonymous
    May 19, 2007
    The comment has been removed

  • Anonymous
    May 19, 2007
    On second thought, I believe I'll go to a Mac. Steve Foister

  • Anonymous
    May 22, 2007
    How to Enable Windows Vista Home Administrator Account I tried the method in above:

  1. Go to User account and disable UAC
  2. Reboot Computer
  3. Open elevated command prompt
  4. Type: net user administrator /active:yes
  5. Switch User to login To Disable Administrator:
  6. Open elevated command prompt
  7. Type: net user administrator /active:no
  8. Go to User account and enable UAC I hope this will help?????????? net user administrator /active:yes Note that you may need to disable UAC or open elevated command prompt.
  • Anonymous
    May 22, 2007
    How to Enable Windows Vista Home Administrator Account I tried the method in above:
  1. Go to User account and disable UAC
  2. Reboot Computer
  3. Open elevated command prompt
  4. Type: net user administrator /active:yes
  5. Switch User to login To Disable Administrator:
  6. Open elevated command prompt
  7. Type: net user administrator /active:no
  8. Go to User account and enable UAC I hope this will help??????????
  • Anonymous
    June 26, 2007
    The comment has been removed

  • Anonymous
    June 27, 2007
    Hi, I realy need help, I have a windows vista ultimate and I need to change a file in system 32, when i try to change it says that it needs administrator permission, but i am the only user on the computer, can you help me pleaseee????

  • Anonymous
    June 28, 2007
    Hi, I realy need help, I have a windows vista home and I need to uninstall sum program when i try for it, it says that it needs administrator permission, but i am the only user on the computer, plzzzzz help me

  • Anonymous
    July 17, 2007
    I have been stuck on this for days now, and haven't been able to find an answer...I have just purchased a new hp laptop with Windows Vista and set up two accounts.  The default account (comes with admin privileges) and a user account.  When I first set up the admin account, I had no troubles giving it a password.  When I changed the password, I had the infamous messages I have been reading about everhywhere saying I couldn't change the password.  I tried several times, and then it was changed.   So, I was then able to login just fine with the default account (admin privileges).  I then did smth that may have messed everything up.  I changed the name of the account to 'Admin' and after that I was no longer able to login (maybe this was a fatal mistake???? If so, it would have been nice if Windows could tell me that this user already exists...or at least that I wouldn't be able to use my computer anymore in that account...ugh).  I didn’t change the password, and in fact the password hint is still the same.  I thought 'administrator' was the administrator username in Windows, not Admin, but maybe I am mistaken?  Is Admin a reserved name too? My  ISP is actually set up on a network in a highrise building, and I read somewhere that if you are on a network, that the username/password on your computer can be changed by the network admin...I thought about this, but think it's much more likely that it's a Vista problem....although found this to be very interesting.  So, Windows Vista came with my new computer, and I am getting the feeling that my only option is to do a reinstall...but I don't even have the software....didn't come with the laptop...all the reading I have found to access the real administrator account say that you have to run the cmd program as an administrator, which requires that I know this password that no longer works.....any help would be greatly appreciated!!! Thanks, Jessi  

  • Anonymous
    July 17, 2007
    WHen I say that I set up the admin account above, I am referring to the default account that Windows gives me...not the 'admin' account.  I haven't touched the 'administrator' account that is disabled in Vista....haven't done anything with that.  Trying to give all details as possible, in case anyone is able to provide helpful information.  Thanks!

  • Anonymous
    July 20, 2007
    Hint to Microsoft, when the users is downgrading machine from a domain machine to workgroup, verify that there is an Administrator account available on the local machine that is ENABLED...

  • Anonymous
    July 26, 2007
    The comment has been removed

  • Anonymous
    August 19, 2007
    By starting a first logon on Windows Vista I renamed a account  created with name xyx, after this, I rename this account and input new password,  the result Windows Locked password and user, how I can resolve this ? tks

  • Anonymous
    August 28, 2007
    How can I reset my admin/parental control password, if the old password does not work? I purchased a new laptop for my daughter (13 yrs old) and it came with Vista pre-installed. I did not have the option to have them install XP instead of Vista - which should be an option whenever a new MS OS comes out, as they work out the bugs with real user feedback. I really did not want Vista on my daughter's laptop, given what I have read about Vista and experienced on friends and families laptops (as the computer geek in the family I am always called on to teach, fix and set up anything tech). We need to install some software and I am unable to get into my admin account. Is there a way to reset my password or create another admin account, if the old password does not work? Thanks!

  • Anonymous
    August 28, 2007
    hi there after reading all the comments on the windows vista administrator account i wanted to ask that i want to install real player on my computer and the administrator account made manually by me does not allow me to do that please help me to install that player or help me to log on to the administrator account. and about the features and looks it is excellent and the parental control is good as it is not available in other OS as far as i know pls help                                                                     thankyou

  • Anonymous
    August 28, 2007
    hi there after reading all the comments on the windows vista administrator account i wanted to ask that i want to install real player on my computer and the administrator account made manually by me does not allow me to do that please help me to install that player or help me to log on to the administrator account. and about the features and looks it is excellent and the parental control is good as it is not available in other OS as far as i know pls help my email id is   mohitgodiya@gmail.com                                                                     thankyou

  • Anonymous
    August 31, 2007
    what is the command for windows vista activation in manual?

  • Anonymous
    September 01, 2007
    The comment has been removed

  • Anonymous
    September 01, 2007
    I see nothing...............Is everyone having this trouble with windows vista???

  • Anonymous
    September 01, 2007
    This ia as bad as the trouble i am having

  • Anonymous
    September 01, 2007
    Your answer..............flashes.......but does not hold

  • Anonymous
    September 03, 2007
    Thanks for the  hints about the password an security. But..... After Vista didn't start up anymore I had to restore my computer to an earlier point in time, using the Vista DVD. It worked and I could reuse the computer again. But a day later, I couldn't access my account on my PC anymore, despite using the same User ID and password I was using before. Any ideas, or do I have to restore my PC again? by the way, I did not create a password reset disk.... Thanks!!

  • Anonymous
    September 18, 2007
    The comment has been removed

  • Anonymous
    September 19, 2007
    The comment has been removed

  • Anonymous
    September 19, 2007
    oh, yeah, my E-mail to those who might be able to help me. Dane87danne@hotmail.com

  • Anonymous
    September 27, 2007
    The comment has been removed

  • Anonymous
    September 30, 2007
    While upgrading windows XP laptop with windows vista my administrator account automatically disabled.

  • Anonymous
    September 30, 2007
    When the built-in administrator is disabled inadvertently in VISTA and there is no other administrator existing, and when then UAC asks for permission, then you can't do nothing. In these cases the unexperienced user has to reinstall VISTA. I think UAC should in these cases propose to restart VISTA in SAFE MODE

  • Anonymous
    October 02, 2007
    The comment has been removed

  • Anonymous
    October 03, 2007
    The comment has been removed

  • Anonymous
    October 05, 2007
    Is this fix for this?  Running Win XP pro, the log-inwindow comes up and wants password ( never put a password in,left it blank) User name is ron, click on ok. Now it says "account disabled see system administrator" Help...................

  • Anonymous
    October 06, 2007
    The comment has been removed

  • Anonymous
    October 10, 2007
    The comment has been removed

  • Anonymous
    October 10, 2007
    The comment has been removed

  • Anonymous
    October 12, 2007
    I am trying to backup files on windows vista with Smart Sync Pro. Many of the files require administrator approval so that they can only be backed up manually. what can I do to allow Smart Sync Pro to acess and back up all the files in documents?

  • Anonymous
    October 24, 2007
    The comment has been removed

  • Anonymous
    October 26, 2007
    By default are administrators in Vista also member of the stanadard user group and when a program does not ask to be run in administrators mode, Vista administrator runs in stanadard user mode. In such cases you may open the property tab by right clicking, use property and then compatibility. The the program runs every time in administrator mode. Or easier right click the icon an "run as a administrator".

  • Anonymous
    October 26, 2007
    The comment has been removed

  • Anonymous
    November 07, 2007
    I would like too know why i can,t send pictures too my hotmail friends with http addys, and what do i do too get it working

  • Anonymous
    November 08, 2007
    I have NEVER seen a more STUPID thing to do but to diaable by default the administrator account. I got stuck 3 hours now to figure out how to manage things and programs on my niece's new PC. The STUPIDITY at its fullest!

  • Anonymous
    November 08, 2007
    Congratulatios Microsoft! You just proved and confirmed what all normal users have been stating years now! That it's impossible to beat a fool man's mind!

  • Anonymous
    November 17, 2007
    The comment has been removed

  • Anonymous
    November 19, 2007
    hi... i lost my administrator account. i always using standart account. also can't creat new administartor account.

  • Anonymous
    November 30, 2007
    This whole issue of Security should be made much more user friendly and entirely customisable. In my particular case there is absolutely no danger or risk relating to a possible local use - I am strictly the only user of this computer. No children or strangers can accessit. Nevertheless until now I have not been able to change my administrator's account. Not only am I prevented from enabling it but also mI am constantly being refused all sorts of manouvers some of them perfectly lain. At present I have my Update module in the control Panel - completely blank, I am unable to update Windows and whatever I might do to circumvent that I am prevented by the software. Which obviously I bought (came with the computer) and is completely legal. Although I own several other computers both at home and in my office (only one other is Vista) I am becoming so annoyed that I am seriously considering switching over to the MAC side

  • Anonymous
    December 02, 2007
    I want to access the administator and i didlike the stupid conformation alwasy can you tell me how to do that I hate it when i see that i am not able to do what i need to. Why vista is so stupid OS right now? Can you tell me how to gain the orginal Administrator account? please post it to vginov@gmail.com

  • Anonymous
    December 02, 2007
    The comment has been removed

  • Anonymous
    December 02, 2007
    activating the built-in administrator:

  1.  open the command prompt as a administrator
  2.  enter the command: net user administrator /active:yes Be careful: This accounts runs only in adminstrator's mode. To switch off the UAC read the help instruction under "user account control" regards Theo
  • Anonymous
    December 08, 2007
    my problem is the comand prompt is doesn't work as a administrator. How can run the command prompt as a administrator? Is it possible to open as safe mode command prompt?

  • Anonymous
    December 08, 2007
    "open the command prompt as an administrator:" means: right click the icon "command prompt", then you see all the menu you need. regards Theo

  • Anonymous
    December 13, 2007
    i have an acer aspire desktop computer w/ windows vista home basic---i forgot my log in password and i did not create a reset disk. what should i do?

  • Anonymous
    December 14, 2007
    Password forgotten: Oh that is bad. There is no chance to log in. You have to install a new copy of window using the dvd. I had the same problem. I was lucky, my computer has two drives, installling windows on drive d: I could read the informations on drive c: afterwards. You must activate vista again. regards Theo

  • Anonymous
    December 14, 2007
    Password forgotten: Oh that is bad. There is no chance to log in. You have to install a new copy of window using the dvd. I had the same problem. I was lucky, my computer has two drives, installling windows on drive d: I could read the informations on drive c: afterwards. You must activate vista again. regards Theo

  • Anonymous
    December 25, 2007
    To enable vista the original built-in "administrator" account, do the following:

  1. log in as one of administrators' account. When first install Windows Vista, you will prompt to enter a user ID and password for one of administrators. Use this account (as an administrator), go to "Control Panel", find "User Accounts", Click "Turn User Control Account On or Off", un-Check "Use UAC control to help protect your computer", hit "ok" and then restart the local machine.
  2. log in as one of administrator account, run "cmd" to open a command prompt, type: net user administrator /active:yes
  3. A message about successful change will be displayed. Now you have activated the built-in administator account.
  4. go to "Control Panel", find "User Account", click it and you should see the built-in administrator account.
  5. log off. You should see an additional icon for the built-in administrator account.
  6. click on the built-in administrator icon, hit "enter" because there is no password required for now. log in to this built-in administrator account and set up your own password for this account (do it through "User Accounts" in "Control Panel". I am using Windows Vista Home Premium Build 6000.
  • Anonymous
    December 26, 2007
    The comment has been removed

  • Anonymous
    December 26, 2007
    sorry...didn't even read the comments :P

  • Anonymous
    January 05, 2008
    I forgot the administrator password for my account. What should i do? i don't have it writen down or anything

  • Anonymous
    January 09, 2008
    Whitout password you can't do anything. You must reinstall vista, but that is no problem. It lasts about one hour and the computer must not be attended. Your personal files are stored in a separate folder and are not lost. All programs must then be reinstalled.. I had also to do it: and now there is one good thing:  I have got a fresh copy of Windows, whitout the little problems of my earlier version.. Regards Theo

  • Anonymous
    January 09, 2008
    Whitout password you can't do anything. You must reinstall vista, but that is no problem. It lasts about one hour and the computer must not be attended. Your personal files are stored in a separate folder and are not lost. All programs must then be reinstalled.. I had also to do it: and now there is one good thing:  I have got a fresh copy of Windows, whitout the little problems of my earlier version.. Regards Theo

  • Anonymous
    January 15, 2008
    The comment has been removed

  • Anonymous
    January 18, 2008
    The comment has been removed

  • Anonymous
    January 19, 2008
    The comment has been removed

  • Anonymous
    January 26, 2008
    All you guys that are so eager to have access to the Vista built in administrator account but aren't smart enough to enable it or work with the existing tools shouldn't have access to the administrator account anyway.  It's people who think they know what they are doing that made Microsoft disable this account in the first place.   Use the tools and the wizards.  Vista is gonna do fine!!! if the IT world stops hacking on it and does what we are supposed to be smart enough to do! Patrick.

  • Anonymous
    January 29, 2008
    I just installed a software on Vista Home Basic and it reguires logging to the built-in administrator account to register before I can run it.  Now where can I enble the built in  account?

  • Anonymous
    February 02, 2008
    The comment has been removed

  • Anonymous
    February 05, 2008
    I purchased a game Family Feud and have been unable to play because parental controls were installed on my computer without my knowledge.  How do I remove?  Help!

  • Anonymous
    February 20, 2008
    I am having a trouble in downloading the files from internet. Whenever i configure a download directory for a Media player and try to download the videos i get an error stating that i do not have sufficient previleges to download this file. Please note that i log in with the account which has administrative previleges. Please assist what needs to be done.

  • Anonymous
    February 23, 2008
    I can not print anything from my e-mail or the internet.  It keep telling me that my account is not registered.  What is going on?  I use to do all of this. Joan Carr

  • Anonymous
    March 11, 2008
    I can no longer get into my e-mail account.  I get the message that I cannot sign in to MSN Messenger because I am using an old version .  To upgrade I need to log on this computer as local administrator.  How?  I am the administrator and new computer user.

  • Anonymous
    March 14, 2008
    I bought 2 PCs with vista for my children to get them online via my router. When i tried to put in the software to set them up it would say, you have to log on as administrator. I tried a lot of things from the web and nothing would work. It was by accident, that when i put the software into the drive, and explored the disc,  i right clicked on the application file when i noticed the option - run as administrator. When i clicked on this it let me in and i have both PCs working. Everthing seems to be running smooth now. If anyone is getting the same problems then do the same thing i have done. Good luck.

  • Anonymous
    March 17, 2008
    I hit logoff by mistake instead of shutdown. Now I get the login screen but when I click on the user account it logs off than logs back on to the user account screen....over and over and over. Boots ok in safe mode. Any idea how to get past this ? thanks (I do hate Vista....a lot)

  • Anonymous
    March 21, 2008
    i forgot my password on my laptop , its vista machine is lenovo y31000 pls help appreciated

  • Anonymous
    April 05, 2008
    i have this sony laptop and when i try and logon it says your account has been disabled. Please see they system administrator. What do i do... I cannot login.

  • Anonymous
    April 07, 2008
    Sorry, I am very angry after switch to Windows Vista from Windows XP and suffer a lot from so awarkward and so stupid arrangement for the UAC.

  • Anonymous
    April 13, 2008
    The comment has been removed

  • Anonymous
    April 15, 2008
    What happens if my Admin account is disabled.and my user password doesn't work?  It's not forgotten but it just doesn't work.  Is there a way to reset the password?  Is there a password reset app out there for Vista like XP Pro? Cheers

  • Anonymous
    April 17, 2008
    The comment has been removed

  • Anonymous
    April 23, 2008
    I have used the full administrator account on 4 systems i have owned over the past year with no issues and very good systems

  • Anonymous
    April 25, 2008
    I had somehow deleted the administrator account and was left with a standard user account. Months of not being able to update software etc later, I finally found this - needless to say not on any Microsoft forum - and it worked Start your computer in Safe Mode (press F8 as soon as you switch on), you will get the Advanced Options Menu.  Down arrow to the first item - Safe Mode and press Enter. Next screen, type in control userpasswords2 click on your user name and click on properties make yourself Administrator Reboot Bingo!

  • Anonymous
    April 28, 2008
    The comment has been removed

  • Anonymous
    May 01, 2008
    The comment has been removed

  • Anonymous
    May 04, 2008
    The "real" reason that the Administrator account is disabled is to remove local control of administrative rights, and by default leaving a back door open to BIG BRO, courtesy of the UNpatriot  Act.  Be a true patriot, reclaim your own admin account and kick the Man off your machine.  IT'S YOURS, YOU BOUGHT IT, they can't tell you what to do with it. I'll Quote Ben Franklin on this one. "I have read your Manuscript with some Attention. By the Arguments it contains against the Doctrine of a particular Providence, tho’ you allow a general Providence, you strike at the Foundation of all Religion (Read Microsoft EULA): For without the Belief of a Providence that takes Cognizance of, guards and guides and may favour particular Persons, there is no Motive to Worship a Deity (Bill Gates), to fear its Displeasure, or to pray for its Protection (UAC, Windows Defender& Firewall), I will not enter into any Discussion of your Principles, tho’ you seem to desire it; At present I shall only give you my Opinion that tho’ your Reasonings are subtle (Shark infested), and may prevail with some Readers, you will not succeed so as to change the general Sentiments of Mankind on that Subject, and the Consequence of printing this Piece will be a great deal of Odium drawn upon your self, Mischief to you and no Benefit to others. He that spits against the Wind, spits in his own Face.." And the oft attributed but no less true, "Any society that would give up a little liberty to gain a little security will deserve neither and lose both."

  • Anonymous
    May 04, 2008
    P.S. In case you fat cats, Devs and sharkie types might be thinking you have nothing to fear, I have two words for you to contemplate, Arrrrrrr, and Ubuntu.

  • Anonymous
    May 13, 2008
    I have been locked out of my computer. I do know my original username which was just plain 'administrator' and the password that logged me in before i tried it. Since i tried that from cmd ive been locked out of my computer for 20+ hours. I'v e tried some password recovery disks but none seemed to work. What do i have to do?

  • Anonymous
    May 19, 2008
    Darren, Thanks for the explaination. If I wanted to enable the adminstrator's account, which registry keys do I need to work with. I have a HD with Windows XP Pro and I wanted to transfer the data from that HD to my new Vista Laptop and cannot because of the ADMIN issue.  My email address is meccpro2005@gmail.com Thanks, Anand Kumar

  • Anonymous
    June 16, 2008
    Use "Offline NT Password & Registry Editor" to either unlock the Administrator account or promote another user to the local administator group to regain access to your locked Windows Vista PC.

  • Anonymous
    June 18, 2008
    hello there i dont know wt to do with the brolbel i have in here .... some one try to help me in my laptop (VISTA ULTIMATE ) and he delete all the users and he made the administrator disabled also to finish the task with so huge smile in his face .... any way can I after all wt i told u able to login to my laptop coa i dont want to repair or format plz plz plz help me

  • Anonymous
    June 25, 2008
    The comment has been removed

  • Anonymous
    June 25, 2008
    The comment has been removed

  • Anonymous
    July 12, 2008
    Built-in Administrator Account Disabled , there is no other administrator account, only available user account user id, how to enable the administrator account in user account?

  • Anonymous
    July 12, 2008
    Built-in Administrator Account Disabled , there is no other administrator account, only available user account user id, how to enable the administrator account in user account? please mail me prakash0106@rediffmail.com

  • Anonymous
    July 13, 2008
    Vista machine. Local administrator account is disabled (unknown) Only other account as Guest. How do I enable the local admin account? thanks, p.s. Don't tell me to re image :) please help before i reimage again. it's a pain :)

  • Anonymous
    July 14, 2008
    Guys, It was me on the previous message: "Vista machine.." I managed to fix the issue after reading through pages of solutions but here's a quick one for you all. Boot from dos, hit F8 to go into SAFE MODE Once in Safe Mode, go to managed user accounts and enable the Administrator account as well as reset the password just to be sure. This will fix the issue, in my case it has done a wonderful job. It saved me from re imaging teh whole machine and re install many software needed. Hope that helps if not, bad luck I guess after all, am just a novice :-)

  • Anonymous
    July 15, 2008
    The comment has been removed

  • Anonymous
    July 18, 2008
    Here's my way to enable the administrator account in Vista: http://www.online-tech-tips.com/windows-vista/enable-administrator-account-vista/

  • Anonymous
    July 18, 2008
    The comment has been removed

  • Anonymous
    July 23, 2008
    Hi I'm not allowed to change my admin approval mode for the built in admin to enabled. I thus have several Program files directories since he wn't let me install in the correct folder.. Well after I reboot there is a conflct with two program files and im force to rename one.... How do I fix this?

  • Anonymous
    August 06, 2008
    The comment has been removed

  • Anonymous
    August 18, 2008
    I have recently added as adminstrator, a standard account user (myself) to avoid the annoying pop-ups when my pictures are presented when I load them, only to find out that in standard account mode, it does the same.  I go to switch back, and I can't.  I didn't give myself permission.  The password, I thought would have been the same as when I originally first logged in as Administrator, but its not.  I went to safe mode, to see if I could loggin as admin. but I can't, so reinstalling the OS, will I need to administer that as well?  How can I solve this...

  • Anonymous
    August 26, 2008
    I have one account - shown as an administrator account. And find it impossible to turn off the parental controls. My wife is now going batshit over this as she has been unable to install itunes. Just wanted to thank whoever designed that little "feature".  I've searched for hours and tried many differant ways to remove that stupid shield from various control panel choices. It works. I can find no way around it at all. Is there a way to save this machine? Can I use my Administrator account to Administer? Any pointers would be appreciated.

  • Anonymous
    September 02, 2008
    I have to delay the auto logon in XP   is it possible?

  • Anonymous
    September 10, 2008
    I unjoined a machine from AD because this message ("the group policy client service failed the logon") appeared when I try to login with a user I created. Unfortunately I was not able find help. I decided to rejoin it in the AD. I made sure I changed the local administrator password for me to use. After unjoining it I noticed the previous username who had the administrator right is the only available one. I could hit ctrl-alt-del in XP and change the username easily but not with Vista. It's only here that I read that the default local admin account is disabled. Now I'm in deep trouble. I could no longer contact the previuos owner of the machine who owns the password. Is there a way to reset it even if it takes a removal of the hard disk and mount it in a different computer. What file/s do I need to modify? any help would be appreciated. -JunT

  • Anonymous
    October 08, 2008
    The comment has been removed

  • Anonymous
    October 08, 2008
    please try to help me. I have an administrator account at windows vista home basic os, i face some problems in using administrative privileges. for example, i am trying to update real player 11 but i received a message says that i dont have needed administrative permissions!!!!!

  • Anonymous
    November 03, 2008
    The comment has been removed

  • Anonymous
    November 03, 2008
    ooo and how do i know when you answer???

  • Anonymous
    November 03, 2008
    Snowyowl, Try searching for "reset administrator password" on Live.com. You will find a number of different methods. As far as knowing when your question is answered, you can subscribe to the RSS feed for this blog.

  • Anonymous
    November 04, 2008
    I lost admin privileges and now it asked for the QBDataServiceUser17 password, which of course QuickBooks swears they don't know. Sat on support with Microsoft for 2 hours and the only solution they could up with was to reinstall everything.   The administrator account is disabled and can't be re-enabled because Vista thinks QBDataServiceUser17 is a valid administrator!

  • Anonymous
    November 11, 2008
    Hi, I've been searching so long for help and support and I don't know were to find it, so I'm asking my question here and I hope somebody will be able to provide me with the apropriate councils I turned on the Guest account for users who don't have permanent account on my computer, one day while a friend were using the Guest accound I needed to quickly take something on a USB port in my account, as it would take a long delay to switch to my account I've just took it by getting to the C: location. Of course I was prompted to enter my administrator password and I did so. Recently I turned of the Guest account as quickly as II was able to cause I constate that it was possible to acces my personal files without entering the administrator password again. Please somebody help I can't continue like that this account is suppose to give no acces to others (personnal files). I tought the password would be required each time some one is trying to acces the pesonnal files but it seem like if you accessed them once you'll be able to acces them for ever. PLease did somebody know how to prevent that

  • Anonymous
    November 12, 2008
    The comment has been removed

  • Anonymous
    November 29, 2008
    I have a dell inspiron 530 with windows vist home premium 32 bit and have been locked out on my Administrator accout and can not get back into it. I did not change the password. however my 12 year did know the passwod and i think she may have changed it without knowng what she was doing. Is there anyway I can regain access to it? or should I use the reistallation dvd? If so how do I do this since i have no access to the  admnistrator account? Please help!!

  • Anonymous
    November 30, 2008
    I have a windows visa desktop and stopped using it for a few months and lent it to my brother as a guest account but when I got it back I tried to logon and it said my password was no good now I can't logon and have been locked out of my account what do I do now? called compaq as it was a compaq machine and they said I could buy a recovery; disk but it would wipe all my photos and personal data.   Is there a way around?

  • Anonymous
    December 10, 2008
    I've a brand new vista machine and had it joined to a domain. The issue currently is that the Administrator a/c that I had created during the initial setup is locked out and the Built-in Administrator a/c is disabled. The domain user is under restrictions to install programs and to access computer management. What I would like to know if the domain user is able to enable the Built-in Administrator a/c without any problem. Thanks, I would appreciate if there's any solution other than this.