Many users being accustomed to Windows XP, after upgrading to Windows 7 or 8 wonder: why do I need the option to run files as administrator if my account is admin as it is? The matter is that Microsoft developers have not provided a regular user accounts, even with the status of "Administrator", with full rights (as it was in XP), in order to prevent a full-fledged launch of programs, among which may be found potentially malicious ones. And the user himself, if he or she is not sufficiently advanced, can make a mess in the operating system if his/her rights to run system commands are unlimited. For advanced ones there is a special account named "Administrator", which is essentially the Super Administrator, in which all of these restrictions are removed. But, unlike WinXP, it is disabled by default. There are several ways to enable the super-admin account, and I will try to describe them here in detail and with clickable pictures.

A few notes:

  • The methods which are suggested to consider, work for all OSs listed at the title of this article. The only difference is in step 1 of method 3, but there is a separate article about it, and I mention it below. Screenshots are taken in Windows 8.1.
  • Methods 1 and 2 are applicable only for Windows 7 Professional, Enterprise and Ultimate, since in Starter and both Home editions the necessary Microsoft Management Console (MMC) snap-in is unavailable. For Windows 8/8.1 Pro and Enterprise, all three methods work with a bang, but in the "basic" editions the first two methods are not appropriate for the same reason as for the Windows 7. Method 3 is suitable for all versions (except, of course, Windows RT and RT 8.1).
  • Also, in Win8/8.1 all actions are carried out in the PC desktop interface using good old technique - via keyboard and mouse. Modern Metro-interface is not used.

The foreword is over. Let's get ready to Rumble!

Method 1: Via the "Local Users and Groups" MMC snap-in.

  1. Press and hold down the Windows key, and then press R (Win+R). The Run dialog will open.
  2. In the Open box type the command lusrmgr.msc.
  3. Click the OK button or hit Enter.
  4. super-admin-01-en

    A console window containing the above mentioned snap-in will appear.

  5. In the left pane, click on the Users folder. A list of user accounts on your system will open in the center pane.
  6. Right click on the Administrator account.
  7. In the popped up menu, select Properties.
  8. super-admin-02-en

    Dialog box Administrator Properties will appear. There do the following:

  9. Staying in the General tab, uncheck the check box Account is disabled.
  10. Click OK or hit Enter.
  11. super-admin-03-en

Method 2: Using the "Local Security Policy" MMC snap-in.

  1. Press and hold down the Windows key, and then press R (Win+R). The Run dialog will open.
  2. In the Open box type the command secpol.msc.
  3. Click the OK button or hit Enter.
  4. super-admin-04-en

    The Local Security Policy snap-in will appear.

  5. In the left pane, click on the small triangle to the left of the folder Local Policies (or just double-click on the folder itself). You will see a list of subfolders in this section. The same list will appear in the right pane.
  6. Click on the Security options in the left pane (or double-click on the same on the right pane). The list of policies should now open in the right pane.
  7. Find the Accounts: Administrator account status item in the list. Right-click on it.
  8. Select Properties in the popped up menu.
  9. super-admin-05-en

    This opens the status Properties dialog of the 'Administrator' account. There:

  10. Staying in the Local Security Setting tab, select the status Enabled.
  11. Click OK or press Enter.
  12. super-admin-06-en

Method 3: Via command prompt.

  1. Open a command-line interface (console window) as an administrator. Since it is used quite often, and besides, is accessed in different ways in Windows 7 and 8/8.1, I have made a separate mini-guide on this issue. See an article How to start a command prompt as administrator in Windows 7, 8, and 8.1.
  2. Now at the command prompt, enter the following command:

    For English OS: net user Administrator /active:yes

    For other languages, type the administrator account name appropriate for your MUI.

    To not to manually enter the entire command, you can copy it to the clipboard directly from the article, and then follow a few steps in accordance with the screenshot:

  3. Right-click anywhere in the console window.
  4. In the popped up menu, select Paste.
  5. Press Enter.
  6. The following message should appear: The command completed successfully.
  7. super-admin-07-en

    Couple of notes:

  1. To disable the Administrator account, in the command's syntax just change the option yes of the parameter 'active' to no.
  2. Moreover, from the same command line, you can change the Administrator password by using the command
  3. net user Administrator password

    with the appropriate parameters.

Thus, the goal in the title was implemented by one of the methods suggested above. If you now log out or reboot, the welcome screen, along with the ordinary user accounts will include the "Administrator" account. Log in and make yourself the owner of your operating system.

Cases where the work from the Super Administrator account can be useful are described in other articles in this site. For example, for the Windows Mail enabling in the same OSs.

In conclusion, I want to mention one important thing. One of the frequently asked questions: whether or not to use Admin as your main account? The answer is - absolutely NOT. The reasons are indicated in the beginning of this article. Therefore, use this option only in cases where a certain problem can not be solved from the regular user account.

Add comment