How to get rights of admin after I disabled all admin accounts in my computer

26

8

I accidentally disabled my admin account.

After I login to another account I found I can not get admin rights, because all admin accounts on my computer are disabled.

I clicked on 'run as administrator' but only see a smart card choice (all the admin accounts are disabled so no choice provided)

enter image description here

I don't want to re-install my OS, help!


Details:

I have account A on my computer.

I got a new computer so I want to give the old one to my mother.

Creating a new user account B for her and disable account A.

Logout and restart.

Successfully login B, now I found I could not get admin rights because no account choice is provided.


More informations about my machine:

OS is Windows 10 and my admin account is a Microsoft Account.

I have an arch-linux installed on my computer and dual-boot it using GRUB, so maybe I can not use safe mode.

PaleNeutron

Posted 2016-01-10T06:52:55.283

Reputation: 363

2This is the reason I have more than one admin account on my computer. – BillDOe – 2016-01-10T06:56:32.870

Your question isn't really clear... Please give us more details... – rahuldottech – 2016-01-10T06:58:09.927

Which version of Windows are you asking about? It's a little different in windows 10 and 7. You can use windows-10 or windows-7 tags. – Sebi – 2016-01-10T07:13:40.927

@Sebi, updated info in my question – PaleNeutron – 2016-01-10T07:14:29.240

@Sebi - How you activate the default Administrator account isn't different between Windows 7 and Windows 10. – Ramhound – 2016-01-10T07:14:45.323

what smart-card?? – rahuldottech – 2016-01-10T07:14:53.267

@RahulBasu, I do not know. I don't have or created a smart-card, just a choice on my screen. Usually I could see admin accounts in this position. – PaleNeutron – 2016-01-10T07:17:38.200

Screenshots please?? – rahuldottech – 2016-01-10T07:18:31.550

@RahulBasu, uploaded – PaleNeutron – 2016-01-10T07:35:59.203

@PaleNeutron - Your keyboard likely has a Smart Card reader. If you are connected to a domain that also could be the reason. This question has been answered numerous times before. Here is the same tutorial I always point to.

– Ramhound – 2016-01-10T07:40:57.543

@Ramhound, so the problem caused by smart-card reader? I don't realize it. Any suggestions? – PaleNeutron – 2016-01-10T07:44:35.330

@PaleNeutron - The problem is not caused by the Smart Card reader built into your keyboard. You just need to enable the default Administrator user built into Windows. If you are on a domain, and you are not authorization or permission to do this, you shouldn't do this and we can't help you bypass restrictions placed by your IT Administrator. – Ramhound – 2016-01-10T07:46:55.140

@Ramhound, THX! I enabled Adminstrators account follow the steps. – PaleNeutron – 2016-01-10T08:00:51.267

This is the closest existing question. – Ramhound – 2016-01-10T08:13:41.043

2makes you wonder why WIndows doesn't warn the user before disabling all admin accounts... – jiggunjer – 2016-01-26T03:49:40.780

@jiggunjer, In fact, that's amazing... – PaleNeutron – 2016-01-27T07:13:58.027

Answers

24

The following tutorial will allow you to enable the default Administrator. There are other ways to change the permission of an existing user and/or change the password of an existing Administrator. Those methods are not covered by this tutorial and are considered out of scope for the purpose of this question.

This tutorial assumes you know how to create an installation disk, boot to that disk, and enter WinRE which is contained on that disk. This tutorial won't cover how to do that. This tutorial does not require access to an Administrator account, the entire purpose of this tutorial is to enable the built-in Administrator account which by default is disabled.

Enable or Disable Built-in Administrator in Command Prompt at Boot

  1. Download the Windows 10 .ISO

  2. Within WinRE at a command prompt, type regedit, and press Enter.

  3. In the left pane of Registry Editor, click/tap on the HKEY_LOCAL_MACHINE key.

enter image description here

  1. Click/tap on File (menu bar), and on Load Hive.

enter image description here

  1. Open the drive that you have Windows 10 installed on, and browse to the location below.

X:\Windows\System32\config

  1. Select the SAM file, and click/tap on Open.

enter image description here

  1. In the Load Hive dialog, type REM_SAM, and click/tap on OK.below)

enter image description here

  1. In the left pane of Registry Editor, navigate to and open the key below.

HKEY_LOCAL_MACHINE\REM_SAM\SAM\Domains\Accounts\Users\000001F4

enter image description here

  1. In the right pane of the 000001F4 key, double click/tap on the F binary value to modify it.

  2. In line 0038, change 11 to 10, click/tap on OK

enter image description here

  1. Close Registry Editor and the command prompt.

  2. Click/tap on Continue to startup back in Windows 10.

Source

Related Question: Where can I get a clean ISO of the Windows 10 Anniversary update?

Ramhound

Posted 2016-01-10T06:52:55.283

Reputation: 28 517

4I encourage people to tell me how I can improve this answer before they issue the downvote. Unless of course you are doing it out of spite, in which case, I encourage you to do it so I can report the behavior to a community moderator. – Ramhound – 2017-04-03T13:11:28.130

2

I would use another method in order to reenable a user account of a member of the Administrator group:

  1. Download an .iso file of Ubuntu and burn it to a disc.

  2. Boot from the burned disc.

  3. Click on "Try Ubuntu".

  4. Open the file manager of Ubuntu and navigate to the hard disk your Windows is installed on. Open the folder X:\Windows\System32.

  5. Copy the file utilman.exe and rename the copy to utilman.exe.bak. Copy the file cmd.exe and rename the copy to utilman.exe.

  6. Shut down Ubuntu and remove the disc of Ubuntu afterwards.

  7. Start your computer in order to boot into Windows. On the logon screen press Windows-Key and U. A command prompt running with system rights will appear. Type into the command net user name /ACTIVE:YES while replacing name with the name of an account in the Administrator group.

  8. After that reboot from the burned disc and undo your previous changes by deleting utilman.exe and renaming utilman.exe.bak to utilman.exe

Norbert Willhelm

Posted 2016-01-10T06:52:55.283

Reputation: 375

This method does not work if Win10 has S-mode enabled. cmd.exe cannot run while S-mode is active. To disable S-mode you need elevated admin privileges... – greatwolf – 2020-02-24T02:29:13.207

0

In short, the access to hidden admin account is possible in safe mode (I can not see this in the usual login page but I can see it in safe mode login page). In this account, you can change the type of other accounts. If you are wondering about the detail, here it is:

1) Click on the Start button, click on Power button, and click on restart while pressing shift;

2) In the new page, go to Troubleshoot > Advanced Options > Startup Settings > Restart; After this, the computer will restart and you can choose different Safe Mode Options;

3) Choose either option, 4) Enable Safe Mode, 5) Enable Safe Mode with Networking, or 6) Enable Safe Mode with Command Prompt;

4) In the Login Page, move the mouse or touchpad to the left bottom corner. The Hidden Administrator Account must be visible. Login into this account by clicking on it (if it does not have a password), or by entering its password;

5) Press Windows Key+R and type Control Panel;

6) In Control Panel, go to User Accounts;

7) Under Make changes to your user account, click on Manage another account;

8) In the page, click on the account that you want to change its type to Administrator;

9) Then click on Change the account type;

9) Finally, in the page that opens you can choose between Standard and Administrator types;

10) Restart your computer by right clicking on Windows Button > Shut down or sign out > restart;

This can be used to promote a user from Standard type to Administrator type!

QGravity

Posted 2016-01-10T06:52:55.283

Reputation: 101

1Your stop 4 assumes the "Hidden Administrator Account" is not locked out. What if it is ? – joedotnot – 2019-04-17T09:50:33.920

-3

start in Safe mode ( at boot hold the F8 key down)and create a new one

Anvesh Vejandla

Posted 2016-01-10T06:52:55.283

Reputation: 177

2You really should provide us with more details... F8 doesn't work on computers running windows 8 and 10.... – rahuldottech – 2016-01-10T07:16:52.093

5if breaking admin password was that easy(pressing F8 and done!), why setting a password? – Iman – 2017-03-24T09:29:27.090