Activate the built-in administrator account. Disabling the built-in Administrator account
Windows 7 takes security seriously, so the Administrator account is disabled by default. To turn it on, you will have to make a few extra movements, and as a result you will get full-fledged administrative rights V Windows system 7.
You can enable the administrator account in several ways - through GUI or command line.
The first option is the simplest - through the interface.
Enabling an account through the interface
Press the key combination
Click on the folder in the left pane Users. Now find the account Administrator in the central panel and right-click on it. Select a team Properties.
In the window Properties: Administrator go to the tab Are common(or it will open immediately) and uncheck .
As you can see, enabling the administrator account in Windows 7 is not difficult at all. However, using the command line it is even easier to do this.
Enabling an account via the command line
Click the button Start, enter the command in the search bar cmd. An icon for cmd.exe will appear at the top of the search window. Right click on it and select command Run as administrator.
Now enter the following command in the command line (for Windows 7 in Russian):
Net user Administrator /active:yes
Well, for English Windows versions 7 you will need to use the following command:
Net user Administrator /active:yes
Now you can go to the administrator account. Click the button Start, then on the arrow next to the button Shutdown and select a team Change user.
In Windows® 7, the built-in administrator account is disabled by default. IN previous versions Windows account an “Administrator” entry with a blank password was automatically created when the operating system was first started.
An Administrator account with a blank password is a source of danger. To better protect your system, the built-in Administrator account is disabled by default in all new installations and upgrades of Windows 7.
In audit mode the program Windows installations implicitly includes the built-in "Administrator" account as last action setup stage auditSystem, if the built-in Administrator account is not already enabled. The first step of the setup phase auditUser is a built-in disabling account"Administrator". This allows you to run programs and applications as an Administrator account. After completing the audit mode settings and logging out, the built-in Administrator account is disabled. If you want to leave the built-in Administrator account enabled, you can re-enable it in Audit mode.
Enable the built-in Administrator account in Windows 7
There are two ways to enable the built-in Administrator account.
- Using the parameter automatic installation AutoLogon
The built-in Administrator account can be used during an unattended installation by setting the Microsoft-Windows-Shell-Setup component's AutoLogon setting to Administrator. This action enables the built-in Administrator account, even if no password is specified in the AdministratorPassword parameter.
You can create an answer file by using Windows Setup Manager.
The following sample answer file shows how to enable the Administrator account, set the Administrator account password, and automatically sign in.
- Equipment « Local users and groups" MMC console
Change the properties of the Administrator account using the Local Users and Groups MMC snap-in.
- Open the MMC console and select the snap-in Local users and groups.
- Right click the account Administrator and select Properties.
A window will open Properties: Administrator.
- On the tab Are common uncheck the box Account is disabled.
- Close the MMC console.
Enable the built-in Administrator account in Windows Server 2008
When working with Windows Server® 2008 the built-in administrator password must be changed the first time you log in. This way, the Administrator account will not have a blank password by default.
For automatic login sections Microsoft-Windows-Shell-Setup | Autologon and Microsoft-Windows-Shell-Setup | UserAccounts | AdministratorPassword. Both parameters should be added to the configuration step auditSystem.
The following XML snippet shows the corresponding values.
yourBApasswordhere true true Administrator yourBApasswordhere true Section Microsoft-Windows-Shell-Setup | UserAccounts | AdministratorPassword can be used during the setup phase oobeSystem so that after installation and configuration are complete, you will not be required to enter a password to log in using the built-in Administrator account.
The following XML snippet demonstrates setting the appropriate values.
Disabling the built-in Administrator account
Original equipment manufacturers (OEMs) and system builders must disable the built-in Administrator account before shipping computers to customers.
- Running sysprep /generalize
After executing the command sysprep /generalize The next time you turn on your computer, the built-in Administrator account will be disabled.
- Performance net commands user
To disable the built-in Administrator account, run the following command:
Net user administrator /active:no
This command can be run after the computer is configured, before the computer is delivered to the customer.
Configuring the built-in administrator password during system provisioning
On Windows Server 2008, Windows Server 2008 R2, and Windows Vista® SP1 default password creation policy requires the creation of complex password for all user accounts. During installation, you are prompted to create a complex password. Attempts to create a simple password manually or using a script (such as the net command) will fail.
When executing the command sysprep /generalize Windows Server 2008 and Windows Server 2008 R2 reset the built-in administrator password. However, the remedy Sysprep Clears the built-in administrator account password only on server editions, not client editions. The next time you start your computer, the installer asks for a password.
You can automate password setup by creating a tool for Sysprep answer file that sets the value for the unattended installation option Microsoft-Windows-Shell-Setup | UserAccounts | AdministratorPassword.
Original equipment manufacturers (OEMs) and system builders should maintain a default password policy on their computers. Enterprise users are allowed to change the default password policy.
An enterprise user can set a simple password for the built-in administrator account during silent installation by specifying the desired value for the Microsoft-Windows-Shell-Setup | UserAccounts | AdministratorPassword.
After Windows XP in the distribution of account rights Windows entries significant changes have occurred. If previously there was an account of a simple user and an administrator (the first had limited rights, and the second – with all powers), then now everything is more complicated.
In Windows 10, an account can be given administrator rights, but these rights are limited: when launching applications, you need to give them administrative rights separately, all actions with system settings are constantly controlled by UAC (i.e., User Account Control), this service is precisely responsible for requests to make changes to the computer in windows on dark background. In addition, some administrative actions are still unavailable, because... There is a “true” administrator in Windows, but his account is disabled by default, because has the broadest powers, is not controlled by UAC, and its use in everyday work significantly reduces security. The article will tell you in detail how to activate the Administrator account if you cannot do without it, and how to disable it again so as not to endanger your computer.
It is universal and quick way, which allows you to enable an account in any edition of Windows 10. Other methods may not work in the home edition of Windows 10.
![](https://i0.wp.com/dontfear.ru/wp-content/uploads/2015/09/Screenshot_115.png)
Using the Computer Management tool
If you prefer the Windows graphical interface, enable the Administrator entry through Account Control.
![](https://i1.wp.com/dontfear.ru/wp-content/uploads/2015/09/Screenshot_55.png)
![](https://i1.wp.com/dontfear.ru/wp-content/uploads/2015/09/Screenshot_93.png)
Using the Local Policy Editor
There is another way to activate the built-in Administrator account by changing the system security policy setting. Ultimately, it doesn't matter how you activated this account.
Windows 7 takes security seriously, so the Administrator account is disabled by default. To enable it, you will have to make a few extra steps, and as a result you will get full-fledged administrative functions in Windows 7.
You can enable the administrator account in several ways - through the graphical interface or the command line.
Attention: methods do not work in Windows 7 Home Premium. You will need Windows 7 Professional or Windows 7 Ultimate.
The first option is the simplest - through the interface.
Enabling an account through the interface
Press the key combination
Click on the folder in the left pane Users. Now find the account Administrator in the central panel and right-click on it. Select a team Properties.
In the window Properties: Administrator go to the tab Are common(or it will open immediately) and uncheck .
As you can see, enabling the administrator account in Windows 7 is not difficult at all. However, using the command line it is even easier to do this.
Enabling an account via the command line
Click the button Start, enter the command in the search bar cmd. An icon for cmd.exe will appear at the top of the search window. Right click on it and select command Run as administrator.
Now enter the following command in the command line (for Windows 7 in Russian):
Net user Administrator /active:yes
Well, for the English version of Windows 7 you will need to use the following command:
Net user Administrator /active:yes
Now you can go to the administrator account. Click the button Start, then on the arrow next to the button Shutdown and select a team .
Then, in the registration window, all you have to do is select the newly created Administrator and you’re done.
The built-in “Administrator” account differs only in that under it all programs are launched with the highest rights without a request to increase rights. Read more in.
Ways to enable the built-in account Administrator
Attention! Editions such as Windows 7 Home Basic or Windows 8.1 Core do not have snap-ins Computer management And Local security policies. Therefore, the simplest and most universal method- This is to activate the Administrator account using the command line.
1. Using the command line
Run Command Prompt as Administrator ().
Net user Administrator /active:yes
To disable an account, use the following command:
Net user Administrator /active:no
2. Through the Computer Management snap-in
Click Win+R
Enter compmgmt.msc
Click OK:
Expand the section Local users and groups.
Select a subsection Users.
Right click on the account Administrator.
Select Properties:
Uncheck Disable account.
Click OK to save parameters:
3. Through local security policies
Click Win+R
Enter secpol.msc
Click Enter or OK:
Expand Local policies
Select Security Settings
Find the policy in the list Accounts: 'Administrator' account status and double-click on it with the left mouse button.
Set the switch to position Included.
Click OK: