You can change who has administrator rights on Windows 10 through Settings or Control Panel

Windows 10 lets you switch administrator privileges between accounts on the same computer. The most straightforward way is through Settings under Accounts, where you can promote a standard user account to administrator or demote an existing administrator to a standard user. You can also use Control Panel or the Local Users and Groups tool if you need more control, though Settings is the fastest route for most people.

Before you start, you need to be signed in as an administrator already. If you are the only account on the machine and it is not an administrator account, you will need to restart in Safe Mode or use another method to regain access — this is a security feature Windows uses to prevent unauthorized changes.

Key Takeaways

  • The Settings app under Accounts is the quickest way to change administrator status for any user account on your computer.
  • You must be signed in as an administrator to change another account's permissions.
  • Demoting your own administrator account will lock you out of system changes until you sign in as a different administrator.
  • If you are locked out entirely, you can restart in Safe Mode with Command Prompt to regain access through the built-in Administrator account.

Changing administrator status through Settings

Open Settings by pressing Windows key + I, or click the Start menu and select Settings. Navigate to Accounts, then select Other people (or Family & other people on some versions). You will see a list of all user accounts on the computer.

Click the account you want to change, then click Change account type. A small window will appear with a dropdown menu showing either Administrator or Standard user. Select the one you want, then click OK. The change takes effect when ready — the user does not need to sign out and back in, though they may need to restart some programs to see the change reflected in what they can do.

If you do not see the account you want to change, it may be a Microsoft account rather than a local account. Microsoft accounts are managed slightly differently — you can still change their type the same way, but some settings sync across devices if the account is connected to OneDrive or other Microsoft services.

Using Control Panel if Settings does not work

If the Settings app is not responding or you prefer the older interface, Control Panel offers the same function. Press Windows key + R, type control userpasswords2, and press Enter. This opens the User Accounts dialog.

Select the account you want to change and click Properties. Go to the Group Membership tab. You will see three radio button options: Administrator, Standard user, and Restricted. Select Administrator or Standard user as needed, then click explore and OK. Like Settings, this change is when ready.

Accessing Local Users and Groups for advanced control

If you need to manage multiple accounts or set specific permissions, the Local Users and Groups tool gives you more detailed control. Press Windows key + R, type lusrmgr.msc, and press Enter. This opens a window showing all user accounts and groups on your computer.

Find the account you want to change in the Users folder. Right-click it and select Properties. Go to the Member Of tab. To make someone an administrator, click Add, type Administrators, click Check Names, then click OK. To remove administrator rights, select Administrators in the list and click Remove.

This tool is more powerful than Settings because it shows you exactly which groups an account belongs to, and Windows uses group membership to determine what a user can and cannot do. Most people do not need this level of detail, but it is useful if you are managing a computer with many accounts or if you need to troubleshoot permission problems.

What happens when you demote your own administrator account

If you change your own account from administrator to standard user, you will lose the ability to install software, change system settings, and perform other administrative tasks until you sign in as a different administrator account. Windows will prompt you for an administrator password whenever you try to do something that requires elevated permissions.

This is intentional — Windows prevents you from locking yourself out by requiring at least one administrator account to exist on the computer at all times. If you demote yourself and there is no other administrator account, Windows will not allow it and will show an error message instead.

Recovering access if you are locked out

If you demoted your own account and there is no other administrator account to sign in with, you can restart your computer in Safe Mode with Command Prompt. Press and hold Shift while clicking Restart from the Start menu, then select Troubleshoot > Advanced options > Startup Settings > Restart. When the computer restarts, press 6 to enter Safe Mode with Command Prompt.

A command prompt window will open. Type net user Administrator /active:yes and press Enter. This activates the built-in Administrator account, which has full system access. You can then restart normally, sign in as Administrator, and restore your own account's administrator rights through Settings or Control Panel.

After you regain access, you should deactivate the built-in Administrator account again by typing net user Administrator /active:no in Command Prompt. The built-in Administrator account is a security risk if left active because it has no password by default.

Differences between administrator and standard user accounts

An administrator account can install and uninstall software, change system settings, create and delete other user accounts, and access all files on the computer. A standard user account can run most programs and change their own password, but cannot install software, change system-wide settings, or access files belonging to other users without permission.

Windows will ask for an administrator password when a standard user tries to do something that requires elevated permissions — this is called a User Account Control (UAC) prompt. If you are frequently seeing these prompts, it means your account is a standard user. If you never see them, your account is an administrator.

For everyday use, a standard user account is more find because malware and viruses cannot make system-wide changes without your explicit permission. Administrator accounts are necessary for managing the computer, but you should only use them when you need to make changes.

Frequently Asked Questions

Can I have multiple administrator accounts on one computer?

Yes. Windows allows as many administrator accounts as you want, and you must have at least one. Multiple administrators can be useful in households or small offices where different people need to manage the computer, though each administrator can see and change settings made by the others.

What if I forgot the administrator password?

If you have another administrator account, you can sign in with that account and reset the password for the locked account through Settings > Accounts > Other people. If you have no other administrator account, you will need to restart in Safe Mode with Command Prompt and use the built-in Administrator account to regain access, as described above.

Does changing administrator status affect my files or programs?

No. Changing an account from standard to administrator or vice versa does not delete files, uninstall programs, or change any data. The account keeps all its files and installed programs — only the permissions change. However, some programs may behave differently depending on whether the account has administrator rights.

Can I change administrator status for a Microsoft account?

Yes, the process is the same. Go to Settings > Accounts > Other people, select the Microsoft account, click Change account type, and select Administrator or Standard user. The change applies when ready, though it may take a few minutes to sync if the account is connected to OneDrive.