How to access the true Administrator account in Windows Vista

[NIM]

Unlike previous versions of Windows, there are differences in Vista between accounts with "computer administrator" privileges and the Administrator account. For instance, the Administrator account does not have User Account Control enabled. There may also be differences in the ability to remove restrictive file operations and object permissions, but Microsoft is still working out those details and does not expect to reveal them until RC1 and beyond. Finally, by default, the Administrator account is present, but it's hidden and disabled on all clean installs of the operating system.

It's even possible to create an "administrator" account, with a lowercase "A." But that won't be the full-fledged Administrator account, it's just another account with computer administrator privileges.

---------------------------------------------------------------------------------------------------------------

Figuring It Out

You won't find the Administrator account in the User Accounts Control Panel. But the MMC-based Computer Management section of the Administrative Tools Control Panel does give you access to the Administrator account. By default, the account is disabled, but you can enable it there. Your obvious conclusion might be that all you need to do is enable the Administrator account, restart Windows and then log into the Administrator account. But that doesn't work. There's an added step that Microsoft hasn't documented and that isn't all that intuitive: Not only do you have to enable the Administrator account, you also have to disable all other accounts with computer-administrator privileges. And since Vista's clean-install setup program forces you to create a new user account with computer administrator privileges, everyone has to cross this hurdle in finding the built-in Administrator.

Before you take any steps to reveal Administrator on your computer, please be aware that there's a bug in Vista Beta 2 that can cause you serious woe if you create a password for your Administrator account in Computer Management. The result of the bug is that you will be completely locked out of your Windows Vista installation. So, please follow the directions to the letter. I will show you how to safely add a password to your Administrator account.

Start by booting your computer to Vista in your computer administrator account. Open the Administrative Tools Control Panel. Double-click the Computer Management item to open it. Authorize UAC by clicking the Continue button. Double-click "Local Users and Groups" to open it. Click the Users folder. On the right side of Computer Management, you should see icons for all of the user accounts created on your computer. The ones that have small red circles with an "X" through them are disabled.

Click to select the Administrator icon, and then right-click it to open its context menu and choose Properties. Remove the check mark from the "Account Is Disabled" box and click OK. You'll need to restart your computer and follow one of the following two methods to access Administrator.

---------------------------------------------------------------------------------------------------------------

Accessing Administrator: Method 1

For this method, you press F8 as Windows is starting up when the character mode part of the boot-up says something to the effect of "Starting Windows. ..." In a dual-boot environment, you can do that from the boot menu. Once the boot menu is showing, paused for your operating system selection, use the arrow or tab keys to select "Microsoft Windows" (the option that runs Windows Vista). Don't press Enter; instead, press the F8 key, and you'll progress to the Safe Mode boot screen. Choose the first option, "Safe Mode" and press Enter.

After a time, Vista will show you the log-in screen with two options, Administrator and Other User. Click the Administrator icon.

Running Safe Mode as Administrator both limits and extends your privileges. But for quick access to the Administrator account, this is about as good as it gets in Vista Beta 2.

---------------------------------------------------------------------------------------------------------------

Accessing Administrator: Method 2

The second method allows you to log into the Administrator account just as you would any normal account. So you get the full-fledged Administrator privileges in a normal boot mode, not Safe Mode. There's a trick you need to know to make it work. And also something you need to watch out for.

Start by enabling the Administrator account in Computer Management just as described above. (Remember: Don't set a password in Computer Management for the Administrator account.)

The second step -- the trick -- is to disable any other enabled accounts with computer administrator privileges in the Users area. Look for account icons that lack the red disable mark. You should find at least one with computer administrator privileges. Follow the same steps to open Properties, but this time, click to add a check mark in the box labeled "Account Is Disabled."

Double check that your Administrator account is enabled. Close Computer Management and restart Windows. When it comes back up, it will just load the Administrator account, since you haven't set a password.

For security reasons, this method should only be used on a temporary basis. Your Administrator account should not be left enabled without a password. So, have a look around, but don't move in. And when you're done, I strongly urge you to re-enable your user account(s) and promptly disable the Administrator account.

If your goal in accessing the Administrator account is to ditch User Account Controls, a somewhat safer way to do that would be to stick with your account with computer-administrator privileges (the one that is not named Administrator). Open the User Account Control Panel. Click the link there that reads "Change security settings" (in Vista Beta 2) and "Turn User Account Control on or off" (in Build 5472 and beyond). On the subsequent screen, you'll find an easy way to turn off UAC.

---------------------------------------------------------------------------------------------------------------

Living Dangerously

There is another possible wrinkle on Method 2. It is possible to set a password for your Administrator account. The bug with setting the Administrator account is in the Computer Management part of the Administrative Tools Control Panel. But there's another way to manage user accounts: the User Accounts Control Panel.

User Accounts doesn't display any settings for the Administrator account until you're booted into that account. But once you're booted into Administrator, it lets you set a password for it without any negative effects. So this is a work-around if you'd like to leave your Administrator account enabled. Enable it in Computer Management, and then set a password for it in the User Accounts Control Panel. It's important to protect it with a password that's not easy to guess or arrive at by trial and error.

---------

by Scot Finnie

[tayled]

I don't know where to find the 'MMC-based Computer Management section' . Is that part of what comes up when you first log in to a computer?

tayled

[NIM]

Start -->search or -->run and type "mmc".

When you do this, go to add remove snap-ins from the file menu.

Choose local users and groups snap-in.

You'll see that Administrator account has been disabled and you can enable it there..

And btw, I've repaired your bbcode since you've put tags in wrong places..

[cavman]

Ok I tried the MMC and Snap in approach also, and Vista is telling me that the Home Premium version will not allow me to run that snap in. Any ideas???

Edited November 7, 2007 by cavman

[NIM]

I guess it won't work with Vista Home Premium.. :crying_anim02:

[tayled]

thank you N1K .... what is the bb code and what tags are you refering to... helps to learn what i did wrong. whoops i clicked on the bb code help and know what you are refering to... i didn't type that in i just clicked on the buttons at the top... perhaps i should have typed it first, highlighted the whole thing and then clicked the buttons... my bad... thank you

I did what you said N1K and I got this message "This computer is running Windows Vista Home Premium. This snapin may not be used with this version of Windows. To manage user accounts for this computer, use the User Accounts tool in the Control Panel."

all this cus i couldn't access a page on a site...

tayled

Edited November 7, 2007 by tayled

[NIM]

Can you see the administrator account when you open computer management?

Right Click My computer --> Manage..

[Vfor]

When desktop comes up after a vista Ultimate install I set the local security policy to show the admin account at boot then I delete the user account you are forced to create at install.

Control Panel - Administrative Tools - Local Security Policy - Local Policies - Security Options - Accounts:Administrator account status - Enable.

Now it boots straight into the admin account but there are still restrictions on access to some files so I add "Take Ownership" to my right click menu which gives me more control overall.

"Taker Ownership"

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\*\shell\runas]
@="Take Ownership"
"NoWorkingDirectory"=""

[HKEY_CLASSES_ROOT\*\shell\runas\command]
@="cmd.exe /c takeown /f \"%1\" && icacls \"%1\" /grant administrators:F"
"IsolatedCommand"="cmd.exe /c takeown /f \"%1\" && icacls \"%1\" /grant administrators:F"

[HKEY_CLASSES_ROOT\Directory\shell\runas]
@="Take Ownership"
"NoWorkingDirectory"=""

[HKEY_CLASSES_ROOT\Directory\shell\runas\command]
@="cmd.exe /c takeown /f \"%1\" /r /d y && icacls \"%1\" /grant administrators:F /t"
"IsolatedCommand"="cmd.exe /c takeown /f \"%1\" /r /d y && icacls \"%1\" /grant administrators:F /t"

[tayled]

When i right clicked on computah in the start menu I got a menu of:

Open

explore

search...

manage

________

scan

________

map network drive...

disconnect network drive...

_________

show on desk top

rename

__________

Properties

I then clicked on manage and a window came up called computah management

but theah isn't anything even remotely like what you mentioned in your post...

"Start -->search or -->run and type "mmc".

When you do this, go to add remove snap-ins from the file menu.

Choose local users and groups snap-in.

You'll see that Administrator account has been disabled and you can enable it there.."

tayled

Edited November 9, 2007 by tayled

[gers_george]

easied way to enable (super) adminstrator account on all windows vista versions is by doing the following

Go to Command Prompt in the start menu but before opening it, right click it and click Open With Administrator Privliages. Once command prompt has opened and you have typed in any passwords for the normal administrator account type in the following:

net user administrator /active:yes

This enables the master administrator account and does not contain any UAC.

Regards