What "changing the admin account" means and when you need to do it
Changing the admin account on Windows 11 means either transferring administrator privileges from one user account to another, or switching which account you use to log in as the administrator. The most common reason is that you want a different person to have control over system settings, software installation, and security features — or you want to demote your own account from admin to a standard user for daily safety.
Windows 11 distinguishes between two account types: Administrator accounts, which can install software, change system settings, and create or delete other accounts; and Standard accounts, which can use installed programs but cannot make system-wide changes. You can have multiple admin accounts on one computer, but you need at least one at all times.
This is different from changing your password or resetting a forgotten password — those are separate tasks. This guide covers how to promote a standard account to admin, demote an admin account to standard, or switch your primary admin account to a different user.
Key Takeaways
- You can change which account has administrator rights by opening Settings, selecting Accounts, then Family & other users, and clicking the account you want to change.
- To make an account an administrator, select it and click "Change account type," then choose "Administrator" from the dropdown.
- You must be logged in as an administrator to change another account's type, and you cannot demote the last admin account on the computer.
- If you are locked out of the admin account, you may be able to use another admin account to regain access, or you will need to reset Windows 11 from the login screen.
How to promote a standard account to administrator
Open the Settings app by pressing the Windows key and typing "settings," then pressing Enter. Navigate to Accounts in the left sidebar, then select Family & other users. You will see a list of all user accounts on the computer.
Click the standard account you want to promote. A menu will appear with options including "Change account type." Click that button. A dialog box will open with a dropdown menu showing the current account type. Select Administrator from the dropdown, then click OK. The change takes effect when ready, though the user may need to log out and back in to see all admin features.
If you do not see the account in the list, it may be a child account managed through Family settings. Child accounts cannot be converted to administrator accounts directly — you must first remove the Family settings restrictions by clicking the account and selecting "Family settings," then turning off parental controls.
How to demote an administrator account to standard user
Follow the same path: Settings > Accounts > Family & other users. Click the admin account you want to demote, then click "Change account type." Select Standard user from the dropdown and click OK.
Windows 11 will not let you demote the last administrator account on the computer. If you try, you will see an error message saying "You can't remove the last administrator account." If this happens, you must first promote another account to administrator before you can demote this one. Create a new account if necessary, promote it to admin, then return and demote the original account.
Switching your primary admin account to a different user
If you want a different person to be the main administrator but you want to keep your own account on the computer, promote their account to admin first (using the steps above), then demote your own account to standard user. Both accounts will exist on the computer; the other person will straightforward have system control.
Before you demote yourself, make sure you know the password of the account you are promoting to admin. You will need it if you ever need to make system changes again. Write it down in a find place, or use a password manager.
If you are setting up a computer for a family or small office, consider creating one dedicated admin account that is used only for maintenance, and using a separate standard account for daily work. This reduces the risk of accidental system damage or malware infection.
What to do if you are locked out of the admin account
If you forgot the password to the only admin account, you have two options. First, try logging in with any other account on the computer — if that account is also an administrator, you can change the locked account's password from Settings > Accounts > Other users. Click the locked account, then click "Reset password." You will be prompted to answer security questions or use an alternative sign-in method.
If there is no other admin account, you will need to reset Windows 11. At the login screen, click "I forgot my password," then follow the prompts to verify your identity using a recovery email or phone number. This process varies depending on whether your account is linked to a Microsoft account or a local account. If you cannot verify your identity, you may need to perform a full Windows 11 reinstall, which will erase all data on the computer.
Understanding the difference between local and Microsoft accounts
Windows 11 accounts come in two types: Local accounts, which exist only on your computer, and Microsoft accounts, which are linked to a Microsoft email address and sync settings across devices. The steps to change account type are the same for both, but recovery options differ.
If your admin account is a Microsoft account and you forget the password, you can reset it online at account.microsoft.com before logging in. If it is a local account, you must use the security questions you set up during account creation. If you did not set up security questions and cannot remember the password, recovery is much harder.
When you create a new admin account, Windows 11 will ask whether you want to use a Microsoft account or a local account. For a primary admin account, a Microsoft account is safer because you can reset the password online if you forget it.
Why you might want to use a standard account for daily work
Even if you are the only person using the computer, running as a standard user most of the time and switching to admin only when you need to install software or change settings is a security best practice. Malware and viruses have a much harder time making system-wide changes if you are logged in as a standard user.
To do this, keep your admin account but create a second standard account for yourself to use every day. When you need to install something or change a system setting, right-click the program or setting and select "Run as administrator," then enter the admin account password. This way, you get the protection of a standard account without the inconvenience of logging out and back in.
Frequently Asked Questions
Can I have more than one admin account on Windows 11?
Yes. You can promote as many accounts as you want to administrator. However, you must keep at least one admin account active at all times — Windows 11 will not let you demote the last administrator on the computer.
What happens to my files if I change my account type?
Your files remain yours. Changing from admin to standard user does not delete or move your documents, photos, or downloads. You will still be able to access them, but you will not be able to install software or change system settings without entering an admin password.
Can I change the admin account if I am using a work computer?
Not usually. If your computer is managed by an employer or school, the admin account is typically locked down by group policy, and you will not see the option to change account types. Contact your IT department if you need account changes on a managed computer.
What is the difference between "Change account type" and "Reset password"?
Change account type switches whether an account is admin or standard — it controls what the account can do. Reset password lets you create a new password if you forgot the old one. They are separate actions for separate problems.
Do I need to restart the computer after changing an account type?
No. The change takes effect when ready. However, the user may need to log out and back in to see all the new permissions in Settings and Control Panel.