As in other Windows OS families, after installing them, we create our own account or log into an account that has already been created. So we get some rights. But not everyone knows that during the Windows installation process an interesting administrator account is created. To avoid problems it is disabled. Now we will talk about how you can enable this account in Windows 10 and how to disable it later.

So, since Windows XP, this account was simply hidden and users did not see it, then, starting with Vista, the administrator account was blocked. It provides unlimited possibilities, that is, you have access to absolutely all functions, it does not work, and running programs as an administrator is not required.

Even if the account is blocked, there are ways in which we will try to enable it.

Via command line

This method is the fastest and most convenient; it will be easy for those who have already worked with the command line. So, run it with administrator rights and run this command:

net user administrator /active:yes

If the command is not completed, a message may appear: name not found, then most likely the account has a different name. To display all accounts, you need to enter the following command on the command line:

net user

As you can see, our account is called “Administrator”, then to activate it we enter the command:

net user Administrator/active:yes

net user Administrator *

Local users

So, open the Local Users and Group window. You can type the name in the search or press the keys Win+R and enter the phrase in the window that opens lusrmgr.msc. A window will open in which you expand the “ Users”, double-click on the administrator account, if anything, it says “Administrator”, then uncheck "Account is disabled" and save the changes.


As you can see, everything is also very simple, the main thing to remember is that user and group policies are not available in home Windows edition 10. And from the window where you enabled the administrator, you can also set a password for the account.

Local Policy Editor

Now let’s use the local policy editor, open it like this: click Win+R, and then enter gpedit.msc. Or, you can enter this command: secpol.msc. Next, we follow this path: Computer configurationWindows Configuration Security SettingsLocal policies Security Settings. Now we search and edit the policy “Accounts: Administrator account status”. And click enable or Enable.



That's all, no matter which method you use, after starting the system you will see the account on the login screen.

How to disable the administrator account

In order to disable the admin account, it is most convenient to use the command line. Open it as administrator and enter the command again, only now instead of yes, it will be no:

net user administrator /active:no

If the OS version is Russian, then the command is as follows:

net user administrator /active:no

That's all. And in the following articles we will look at how you can use this account.

This article will tell you how to hide account user from the welcome screen in Windows 10/8.1/7. As an example, we will try to hide the user 'site':

Hiding a user account

Warning! Before hiding the administrator account, make sure that there are other administrators on the system. If you hide the account of a single administrator (or all administrators) using the following method, you will no longer be able to gain access to write values ​​to the registry. Accordingly, you will not be able to return the hidden administrative account to the welcome screen. In this case, to solve the problem you will need to edit the registry using an offline editor.

1 Click Win+R.

2 Enter cmd.

3 Press Enter or OK:

4 Enter the command net users.

5 Click Enter.

6 Copy Name the account you want to hide. (how to copy data from command line)

Keep in mind that Name And Full name- these are different things. In this case we need to know Name user (in English terminology - Name).

7 Click Win+R.

8 Enter regedit.

9 Click Enter or OK:

10 Find the section

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

11 Create a partition SpecialAccounts:

12 In section SpecialAccounts create a section in the same way UserList:

The path should look like this:

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserList

13 In section UserList create a new one DWORD value (32 bits):

14 For the setting name, enter the name of the account you want to hide from the Welcome screen. (In our example, we will hide the user ‘site’. Therefore, we give the same name to the DWORD parameter).

Leave it at 0 to hide the user from the welcome screen.

To check the result, restart your computer. As you can see in the picture, the specified user has been hidden from the welcome screen:

How to use a hidden account

The hidden account remains active, but you cannot log into it from the welcome screen (in other words, console access is not possible). You can log into a hidden account using a remote desktop. Also, you can run any applications and applets under a hidden account. To do this, log in under a different account and use the runas /user syntax:<имя> <приложение> ().

There is one more point. When starting operations that require elevation from a simple user account, the UAC control system prompts you to enter the password for an existing administrator account. If the only administrator account on the computer was hidden as described above, then it will be impossible to enter his password.

This is what a request for promotion looks like when there are no active or non-active employees in the system. hidden accounts administrators:

As you can see in the picture, there is no field for entering a password and there is nowhere to enter the password. Button Yes inactive.

Therefore, as we warned at the beginning of the article, if you have hidden all administrators in the system, then you will have to.

How to return a hidden user to the welcome screen

If in the future you need to redisplay a hidden user account on the Welcome screen, you have two ways to do this:

1. Change the parameter value from “0” to “1”:

2. Delete the parameter with the name of the corresponding account from the registry:

If you cannot make changes to the registry, read the article.

Windows 8 (as well as Windows XP and Windows 7) by default displays a list of all local computer accounts on the Welcome screen (login screen). To log in to the system, the user must select the desired account and enter its password. When there are a large number of local users, the login screen becomes christmas tree. This is not very convenient and, in part, not very secure (administrative / service accounts are revealed). In such cases it would be convenient hide unnecessary user accounts from the Windows Welcome screen.

The ability to hide specific user accounts from the user list on the login screen is available in all versions of Windows. This feature is implemented through a small registry tweak. Thanks to this feature, you can hide service accounts (created for the operation of third-party services and applications), or the system administrator account, ensuring that the computer and desktop boot under the user account, and the PC operator does not need to select the account he needs each time on the welcome screen. In the latter case, if necessary, you can escalate privileges using RunAs by specifying the administrator name and password.

First of all, you need to determine the list of accounts in the system. You can display a list of all users with the command:

Net users

Or in the Computer Management console interface compmgmt.msc (Computer Management -> System Tools -> Local Users and Groups-> Users).

Copy the name of the account that we want to hide to the clipboard. Let's say in our case it will be User1.

Advice. We're interested in the account name that appears in the Name column, not the Full Name that appears on the login screen.

Open the registry editor (regedit.exe) and go to the branch HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon . Let's create a new branch in it with the name SpecialAccounts, in which we will in turn create a branch with the name UserList.

In the created UserList branch (we got this path: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserList) let's create new parameter with a DWORD name, as the name of which you need to specify the name of the user account that you want to hide (the default value of the parameter is 0, which does not need to be changed).

  • 0 - Hide user from Welcome Screen list
  • 1 - Show user in Welcome Screen list

In our example, we will create a DWORD value named User1 with a value of 0.

Restart your computer and, if you did everything correctly, the User1 account icon will not appear on the login screen.

It should be taken into account that along with hiding the account in the Welcome window, it will be hidden in the Control Panel applet User Accounts (Control Panel\All Control Panel Items\User Accounts). You can manage hidden accounts using the “ Local users and groups" (lusrmgr.msc) or using the standard console: control userpasswords2

To make your account appear on the Windows 8 login screen again, you just need to delete the DWORD value you created in this tutorial (or set it to 1).

At Windows installation 10, the system asks you to create and configure a user account, or rather, a local administrator. However, during the installation process of the system in stealth mode, another administrator account is automatically created with higher privileges and access rights. In particular, it is not covered by the UAC mechanism; therefore, all applications launched with “global” administrator rights are executed bypassing this security system.

The hidden administrator account can be used to install drivers, unsigned programs, and execute various settings, requiring elevated access rights. However, it is recommended to resort to it only in extreme cases, and after completing necessary actions be sure to turn it off. There are three main ways to enable the hidden administrator account: through command line, through the Local Policy Editor and using the Local Users and Groups snap-in. Let's look at them in order.

Enabling the hidden Administrator account via the command line

The first method is the simplest and most convenient. Open a command prompt as an administrator (Windows Command List (Windows CMD) will also be useful for you) and run the command in it:

net user Administrator /active:yes

If suddenly you receive the message “Username not found,” it means your hidden admin has been renamed or you are using English Windows version(the message will be in English). In this case, check the admin name by immediately running the command

By default, the hidden administrator account does not have a password, so we strongly recommend that you set it using the command

net user Administrator password

having first replaced “password” with your password.

Enabling the hidden Administrator account through the local editor group policy

With the Local Group Policy Editor everything is just as simple, just a little longer. Open it with the command gpedit.msc(right click on the Start menu - Run) and go to Computer Configuration -> Windows Configuration -> Security Settings -> Local Policies -> Security Settings, in the right part of the window find the option “Accounts. Administrator account status" and enable it.

Enabling the hidden Administrator account through the Local Users and Groups snap-in

It will take approximately the same amount of time to enable the administrator account through the Local Users and Groups snap-in. Open it with the command lusrmgr.msc(right click on the Start menu - Run), expand the “Users” section, find the “Administrator” entry on the right side and double-click on it, uncheck “Disable account” in the window that opens and save the changes.

To which one of these three ways If you haven't done so, the hidden administrator account will become available on the login screen. This account is disabled in exactly the same way by replacing yes in the first command with no. In general, the simplest and easiest way to disable it is from the same CMD console (command line) by running one single command in it

net user administrator /active:no

How to enable the built-in administrator account when Windows 10 can't sign in

And last possible variant- logging into Windows 10 is impossible for one reason or another and you need to activate the Administrator account in order to take action to correct the situation (see also Windows 10 How to remove built-in applications and How to speed up Windows 10). If you remember your account password, but for some reason you can’t log into Windows 10 (for example, the computer freezes after entering the password). In this case possible way The solution to the problem will be like this:

  1. At the login screen, click the power button shown below on the right, then hold Shift and click Restart.
  2. The environment will load Windows recovery Go to "Troubleshooting" - "Advanced Options" - "Command Line".
  3. You will be required to enter your account password to launch Command Prompt.
  4. This time the login should work (if the password you remember is correct).
  5. After that, use the first method from this article to enable the hidden account.
  6. Close Command Prompt and restart your computer (or click Continue. Quit and use Windows 10).

Conclusion

Remember: such an account is blocked not because of the whim of the developers, but for your own good and safe work on the computer. Working with full administrator rights, there is a higher chance of picking up viruses or causing something irreparably disrupted in the system. Therefore, even professionals are advised to enable the administrator account only to solve a specific problem or perform a specific action, switching back to regular entry user - your computer, your nerves, and the money that you won’t have to pay for repairs will be safer. You might be interested in How to reset Windows 10 to factory settings and disable Windows 10 spy features.

Be careful when using Windows 10, and your device will reward you with good and fast performance!