As you know, when installing Windows 10, the system asks you to create a user account and grants local administrator rights to this account. However, during the installation process another one is created hidden admin account, which is disabled for security reasons. In this article we will talk about the built-in administrator account in Windows 10, what it is for, how to enable it and block it.

Even in Windows XP, the administrator account was hidden from the login screen, and from Windows Vista to Windows 10 inclusive, it is also blocked. The built-in administrator account has full, unlimited rights on the computer; this account is not subject to UAC (User Account Control), and all programs are executed without a UAC prompt (this is its main difference from user accounts with administrator rights).

Important. You need to enable the “Administrator” account only if absolutely necessary to perform a specific task or troubleshoot. It is not recommended to keep this account active all the time, much less constantly work from under it.

We'll look at several ways to enable the built-in administrator account in Windows 10.

Advice. By default, the Administrator password is not specified (empty).

Command line

The fastest and easiest way to enable the administrator account is from an elevated command prompt.

To do this, run the command:

net user administrator /active:yes

Advice. If the command returns that the name was not found, your administrator account has likely been renamed. You can display a list of all accounts with the command:

In our case (Russian version of Windows 10), the account is called “Administrator”. We activate it with the command:

By default, there is no password specified for this account (empty password), so we strongly recommend changing it to something quite complex. The password is set by the command (the password will need to be specified twice).

net user Administrator *

Note. The considered method of activating the built-in administrator from the command line will work in all versions of Windows 10. While the methods discussed below are not applicable to home editions of Win 10, which do not have the Computer Management and Local Security Policy snap-ins

Local Users and Group snap-in

Open the Local Users and Groups MMC snap-in by typing in the search bar or command line lusrmgr.msc. In the console window, expand the section Users. Find and double-click on the account named Administrator and uncheck the checkbox Account is Disabled(Account is disabled). Save your changes.

The administrator account is now enabled. In the same console, you can change its password by selecting in the context menu Set Password.

Local Policy Editor

Open (or local security policy editor - secpol.msc). Go to section Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> Security Options. Find and edit the policy Accounts: Administrator account status(Accounts. State of the 'Administrator' account), changing it to the state Enable.

After enabling the administrator account using any of the above methods, it will be available on the login screen.

The administrator is disabled in the reverse order. The easiest way to do this is from the command line:

net user administrator /active:no

If you use a PC with other people, it is advisable that each person have their own account. In this case, each user can personalize their profile. Accounts also help control what files and applications users can use and what changes they can make to the computer. There are two types of account:

1. Local - contains a user profile that can only be used on this computer. To use, you need to select a user name and enter a password if required.
2. Microsoft - uses an email address and password to log into Microsoft services with Windows 10, thereby profile settings are not tied to a specific PC, but can be synchronized with other devices.

In this guide, we will look at how to create a new user on Windows 10 local type. the topic of a separate article. Profile files are created after the first login to a new account. To follow the steps in this guide, you need to be an administrator.

Adding via parameters

Use the combination + I to enter the parameters. Visit the Accounts section.

On the left, select "Family and Other People." On the right, click the add a new user link.

Next, click on the link that indicates that this person does not have login information.

The next step is to click the link to add a user without a Microsoft account.

Write the user name. If necessary, set a password and confirm it. When using a password, be sure to select 3 security questions and enter the answers to them. Click Next.

The account has now been created. The profile folder will be added as soon as you log in to your account for the first time. By default, the new account will be assigned the “Standard User” type, but you can change it to “Administrator” if necessary. To do this, LMB click on the new account to make hidden buttons appear. Next, click the button to change account type.

In this window, specify the account type you need. Click OK.

Creation via netplwiz

Type netplwiz into the input line, click OK.

Make sure that the option to require a username and password is checked. Click Add.

Click the sign in without a Microsoft account link, which is not recommended.

Accordingly, choose a local account.

Enter a name, set a password and a hint for it if necessary. Click "Next".

To add an account in Windows 10, click "Done".

A new account will appear in the netplwiz window, the group of which is “Users”. To change the group, select the account by clicking “Properties”.

Go to the Group Membership tab, setting the access level, for example, administrator. Click OK and OK.

Adding via local users and groups

The Local Users and Groups snap-in is not available in the Home edition of Windows 10. If your edition is higher, you can use this method. Launch Run (Win + R). Type lusrmgr.msc and click OK.

Click on the “Users” section. On the right, click on “More Actions” by selecting “New User” from the menu.

Fill in the "User" field. Fill in other fields as required. You can leave the checkboxes at the bottom of the window unchecked and leave them at default. To add a user, click Create. Next, close the window.

In order for the user to acquire administrator rights, right-click on the new account and select “Properties”.

In the Group Membership section, click Add. In the bottom input field, write “Administrators” by clicking OK and OK again.

Creation via Cmd

You can also add a user to Windows 10 through the command line. Run Cmd with elevated rights (read). Enter the following structure:

net user "XXXX" /add

Where XXXX is the user name. Once you have set your name, click Enter. The construction above creates a user without password protection, to have protection, use the following construction:

net user "XXXX" "YYYY" /add

Where XXXX is the user name, and YYYY is your password. Don't forget to press Enter after entering structures. This will create a “standard user” account type. If he needs to add admin status, then use this construction:

net localgroup Administrators "XXXX" /add

Where XXXX, as is already clear, is the user name. Click Enter.

As a result of using one of the methods above, a user will be added. Click “Start”, then on the account management icon, where you will see new names, select the one you need. Next, wait for the profile to be generated.

Now you know how to create an account in Windows 10 in a variety of ways. If there are two users on one PC, you definitely need to add a second profile, and maybe even several. Another important aspect is the transfer of the account to administrative status.

Having your own personal computer is a luxury for some. It is not uncommon for more than two people to use a single computer in a home. But there is information that is better hidden from strangers. That is why in the Microsoft operating system it is possible to create several owners of a computer and set a password for any of them individually. Thanks to this, each person can store their own documents in specific folders that other people cannot access.

Quite often, purchased personal computers already have several PC owners. The reason for this is the limited ability to access the data. When customers come into a store and test laptops, they may specifically download malicious software. That is why a new person is created in an operating system without administrator rights, where the person does not have the ability to delete, edit or install files.

Adding a user via Start

You need to go to Start and, using the “” item, find a section with a list of all PC owners. This section has a subsection for family and other accounts. This is where you can create a new person to control the computer. When adding a new PC owner, you must fill in a name and create a password.

Adding a user via Command Line

To display Command line you need to right-click on the menu Start and select Command Line. You must run it as an administrator. It serves to perform various actions on a personal computer using specially designed commands.

IN Command line you need to enter the command net user Admin password /add where Admin is the name of the new person using the personal computer, and password is the password. If everything is done correctly, then Command line The message “Command completed successfully” will appear.

Adding a user via Control Panel

Of course, any setting in the Windows operating system is resolved through Control Panel. You must select the item "", tab " Control Panel" and find the section " user accounts».

On the Users tab there will be an Add button. After this, you can add a new person, but you need to decide what kind of account you need to create:

• Microsoft account;
• local account.

When new Microsoft account will be created, the owner will be able to use the standard Windows Store, automatically update standard applications and synchronize software applications.

When local recording the owner of the personal computer will be created, a new owner of the PC will appear in Windows 10. This method is recommended for those who already have a Microsoft account and just need to differentiate access rights on their own computer.

When choosing any option, the PC owner will have to enter the account name and generate a password to log into the system.

Adding Local Users

When you press the Win + R key combination, the " Execute", in which you need to enter the command "". Click OK and see several folders in the window that appears: “ Users" And " Groups" In groups, rights to files and folders on the computer are created for various accounts. Here you can set up full access to all files and folders on the computer or prohibit this person from most operations, such as editing, installing and deleting new files. In folder " Users» All local computer owner records located in Windows are present.

By clicking on the folder " Users", using the right mouse button, you must select the operation " New user" Next, you need to come up with a name for the new owner and generate a password. If it is required that the Windows user has full access to all files and folders in this operating system, then you need to go to the “ Users", select the created user and in the tab " Group Membership» assign the value to administrator. Then the new user will be able to fully manage files and folders on the PC, installing new various programs, deleting old ones, editing data and making all permissible system settings.

Adding new users in the Windows 10 operating system is not significantly different from other operating systems. Exactly the same through Control Panel It is possible to create new accounts in both the eighth and seventh versions.

Video on the topic

Welcome back to my blog and now we will look at the pressing issue of how to add a local user in Windows 10. It’s clear that Windows will strongly recommend an account named after itself, how could it be otherwise :) But this is not necessary in all cases and not everyone wants it (what if Windows will keep track of me? No, we’ll make do with a local entry somehow). Or guests have come to stay with you for a few days and want to sit at the computer. You don’t want to let guests into your personal virtual space, which has already been set up and lived in. And the guests are so dense that they still don’t have a Microsoft account, what a horror! Just kidding, just kidding) But nevertheless, the ability to create a local user in Windows 10 is left, which we will use.

Method 1. Standard

So let's get started. Visit us at: Start -> Options -> Accounts. You can also quickly get to Settings by pressing the combination Win+I.

In the accounts window, click on the tab on the left Family and other users. Then click in the section Other users link Add a user for this computer.

We will now begin the user creation process, during which Windows will strongly recommend a network account. At first, Windows, in its simplicity, will think that you want to add a user with a Microsoft account and the first thing it will do is ask you to enter their email or phone number. But we say our firm “No!” and click on the little invisible link below I don't have this person's login information.

But Windows is not going to give up so quickly and offers to create a new Microsoft account. This, of course, is not part of our plans and we again click on the small and inconspicuous link below with the name Add a user without a Microsoft account.

Windows 10 is beginning to understand that we are determined and will go to the bitter end. And in the next window we are finally allowed to create a local account. Enter the username, for example, User2 and password if necessary. You can do without a password, it’s at your discretion. And we complete the process with the Next button.

Well, here it is, our local happiness is on the list) By the way, you can delete an unnecessary user or one that has become unnecessary if you select the account and select Delete.

By default, a standard user with limited rights is created. If you are happy with this, then you don’t need to change anything, and if you want to promote the user to Administrator, then click on his name and select Change account type. Select Administrator from the list and confirm with OK.

And now I’ll show you another way to create a user, a more cunning one)

Method 2. Tricky-advanced

Open the Run window using the Win + R key combination. Enter one of the commands there: netplwiz or control userpasswords2. Both options will bring up the same window. Press OK or Enter on the keyboard.

User Accounts shows a list of accounts on your computer. Press the button Add… and let's start creating a new user.

Windows 10 will again cheerfully advise us to create a Microsoft account. We'll also cheerfully ignore this advice and click on the little inconspicuous link below: Sign in without a Microsoft account.

This is a tool designed to manage local users and groups. A local user or group is an account that can be granted permissions and rights on your computer.

The Local Users and Groups snap-in is an important security tool because it allows you to limit what users and groups can do by assigning rights and permissions to them. One user account can belong to several groups.

You can access this snap-in by typing lusrmgr.msc. On the left side of the window that opens you can see two folders - Users and Groups.

The Users folder displays the two built-in user accounts, Administrator and Guest, that are created automatically when you install Windows XP, as well as any user accounts that have been created.

Account Administrator used when installing the operating system for the first time. This account allows you to perform necessary actions before the user creates their own account. The Administrator account cannot be deleted, disabled, or removed from the local Administrators group, preventing you from accidentally losing access to your computer after all administrator accounts are deleted. This property distinguishes the Administrator account from other members of the local Administrators group.

Account Guest used by those who do not have a real account on the computer. If a user's account is disabled (but not deleted), they can also use the Guest account. A guest account does not require a password. It is disabled by default, but can be enabled.

To add a new user account, right-click on the Users folder and select New User... from the drop-down menu. In the window that opens, enter the information to create a new account. To delete a user account, right-click on the account name in the right program window and select Delete from the drop-down menu.

You can also assign the path to the profile and login script for a specific account (see help for more details).

The Groups folder displays all built-in groups and user-created groups. Built-in groups are created automatically when you install Windows XP. Membership in a group gives a user the rights and abilities to perform various tasks on the computer. The following describes the properties of some built-in groups:

Administrators

Membership in this group by default provides the broadest set of permissions and the ability to change your own permissions. Administrators have full, unrestricted access rights to a computer or domain. Working as an administrator in Windows XP makes the system vulnerable to Trojan horses and other security threats. Simply visiting a website can cause serious damage to your system. An unfamiliar website may contain a Trojan horse that will be downloaded to the system and executed. If you are logged in with administrator rights at this time, such a program can reformat the hard drive, erase all files, create a new user account with administrative access, etc.

• installation of the operating system and its components (for example, device drivers, system services, and so on);
• installation of service packs;
• operating system updates;
• operating system recovery;
• settings of the most important operating system parameters (password policy, access control, audit policy, driver settings in kernel mode, and so on);
• taking possession of files that have become inaccessible;
• managing security and audit logs;
• archiving and system recovery.

In practice, administrator accounts must often be used to install and run programs written for previous versions of Windows.

Advanced users

This group is maintained primarily for backward compatibility for running non-certified applications. The default permissions granted to this group allow group members to change computer settings. If support for non-certified applications is required, end users must be members of the Power Users group.

Members of the Power Users group have more permissions than members of the Users group and less than members of the Administrators group. Power users can perform any task with the operating system, except tasks reserved for the Administrators group.

Advanced users can:

• Run applications certified for Windows 2000 and Windows XP Professional, as well as legacy applications;
• install programs that do not change operating system files and system services;
• configure system-level resources, including printers, date and time, power settings, and other control panel resources;
• create and manage local user and group accounts;
• stop and start system services that are not running by default.

Power users cannot add themselves to the Administrators group. They cannot access other users' data on an NTFS volume unless those users' permissions are granted. Because power users can install and change programs, using a Power User account while connected to the Internet can leave your system vulnerable to Trojan horses and other security threats.

Users

Members of this group cannot share directories or create local printers. The Users group provides the most secure environment for running programs. On a volume with an NTFS file system, the default security settings of a newly installed (not upgraded) system are designed to prevent members of this group from compromising the integrity of the operating system and installed programs. Users cannot change system-level registry settings, operating system files, or programs. Users can shut down workstations, but not servers. Users can create local groups, but can only manage those they create. Users have full access to their data files and their portion of the registry (HKEY_CURRENT_USER). However, user-level permissions often prevent the user from running legacy applications. Members of the Users group are guaranteed to only run Windows-certified applications.

Archive operators

Members of this group can back up and restore files on the computer, regardless of any permissions that protect those files. They can also log on and shut down the computer, but cannot change security settings. Archiving and restoring data files and system files requires read and write permissions. The default permissions for archive operators, which allow them to archive and restore files, make it possible for them to use group permissions for other purposes, such as reading other users' files and installing Trojan horse programs.

Guests

Members of this group have the same rights as users by default, with the exception of the Guest account, which has even more limited rights.

Network Configuration Operators

Members of this group may have some administrative rights to control the configuration of network settings.

Remote Desktop Users

Members of this group have permission to log on remotely.

To add a user account to a particular group, right-click on the group name and select Add to Group from the drop-down menu. For more detailed help on performing these and other tasks related to user and group accounts, and a more complete description of user and group accounts, see the Local Users and Groups help.