What You Need to Know Before Changing Administrator

To change who has administrator rights on your Windows computer, you need to be logged in as an administrator yourself. Windows stores administrator accounts separately from standard user accounts, and only an existing administrator can create a new one or remove administrator rights from someone else. If you are the only administrator and you lock yourself out, you will need to use Windows recovery tools or contact Microsoft support to regain access.

The process differs slightly depending on whether you want to make an existing user account an administrator, create a brand new administrator account, or remove administrator rights from someone. All three tasks happen in the same place: the Settings app or the older Control Panel. Most people find the Settings method faster on Windows 10 and Windows 11.

Key Takeaways

  • You must already be logged in as an administrator to change administrator status for any account on the computer.
  • The fastest method on Windows 10 and 11 is Settings > Accounts > Other people, where you can promote an existing user to administrator in two clicks.
  • If you need to create a completely new administrator account, use the same Settings menu and select "Add account" instead of changing an existing one.
  • Removing administrator rights from an account takes the same steps as adding them — open the account, select "Change account type," and switch from Administrator to Standard User.
  • If you are the only administrator and you forget your password, Windows recovery mode or a password reset disk are your only options to regain access.

Promote an Existing User to Administrator on Windows 10 or 11

Open the Settings app by pressing the Windows key and typing "settings," then press Enter. Navigate to Accounts in the left sidebar, then select Other people. You will see a list of all user accounts on the computer.

Click the account you want to make an administrator. A panel will open showing that account's details. Look for the line that says "Account type" and click Change account type. A dropdown menu will appear with two options: Administrator and Standard User. Select Administrator, then click OK. The change takes effect when ready — the user does not need to log out and back in.

If the account you want to promote does not appear in the "Other people" list, it may be a Microsoft account that has not yet signed in on this computer. Ask that person to log in once with their Microsoft account credentials, then repeat the steps above.

Create a New Administrator Account

Open Settings, go to Accounts, and select Other people. At the top of the list, click Add account. Windows will ask whether you want to sign in with a Microsoft account or create a local account. A Microsoft account is tied to an email address and syncs your settings across devices; a local account exists only on this computer.

If you choose Microsoft account, type the email address and follow the prompts. If you choose local account, click I don't have this person's sign-in information, then Add a user without a Microsoft account. Enter a username and password (or leave the password blank if you want to set one later), then click Next.

Once the account is created, it will appear in the "Other people" list as a Standard User. Follow the steps in the section above to change its account type to Administrator. The new account will be ready to use when ready.

Remove Administrator Rights from an Account

Open Settings, go to Accounts, and select Other people. Click the administrator account you want to downgrade. Select Change account type, choose Standard User from the dropdown, and click OK. That account will no longer have administrator privileges.

The person using that account can still log in and use the computer normally — they straightforward will not be able to install software, change system settings, or perform other tasks that require administrator permission. If they try to do something that needs administrator rights, Windows will prompt them to enter an administrator password.

Using Control Panel If Settings Does Not Work

On older Windows versions or if the Settings method does not work, you can use Control Panel instead. Press the Windows key, type "control panel," and press Enter. Select User Accounts, then Manage another account. Click the account you want to change, then select Change the account type. Choose Administrator or Standard User and click Change Account Type.

The Control Panel method works the same way as Settings but uses an older interface. Most Windows 10 and 11 users will find Settings faster, but Control Panel is useful if you are troubleshooting a problem with the newer interface.

What to Do If You Are the Only Administrator

If you are the only administrator on the computer and you forget your password, you cannot log in to change administrator status for anyone else. Windows offers two recovery options: using a password reset disk (if you created one before you forgot your password) or using another administrator account on the computer.

If you have neither, you will need to use Windows recovery mode. Restart the computer and hold down the Shift key while clicking the power button to shut down. Turn the computer back on — it should boot into the recovery menu. From there, you can reset your password or create a new local account. The exact steps vary by Windows version, so search for "Windows [your version] password reset" if you need detailed instructions.

To avoid this situation, create a second administrator account now as a backup. You can also create a password reset disk by going to Settings > Accounts > Sign-in options > Password > Create a password reset disk.

Common Mistakes to Avoid

Do not remove administrator rights from your own account unless you have created a second administrator account first. If you are the only administrator and you downgrade yourself to Standard User, you will not be able to undo it without that second account.

Do not assume that making someone a Standard User prevents them from accessing files or folders on the computer. Standard users can still see and use most files — administrator rights mainly control system-level changes. If you want to restrict what someone can see, you need to use file permissions or parental controls instead.

Do not create multiple administrator accounts if you only need one. Each administrator account is a potential security risk because anyone with administrator access can install software or change settings that affect the whole computer. Create a second administrator account only as a backup, and use a Standard User account for everyday tasks.

Frequently Asked Questions

Can I change administrator without logging out?

Yes. Changes to administrator status take effect when ready without requiring a logout or restart. The person using that account will see the change the next time they try to perform an action that requires administrator rights.

What happens to files if I remove someone's administrator rights?

Their files remain on the computer and they can still access them. Removing administrator rights only prevents them from installing software, changing system settings, or modifying other users' accounts. Their personal files are unaffected.

Can a Standard User promote themselves to Administrator?

No. Only an existing administrator can change account types. A Standard User cannot access the Settings or Control Panel options needed to make this change.

What if I need to change administrator on a work computer?

Work computers are often managed by your IT department, and you may not have permission to change administrator status yourself. Contact your IT support team before attempting these steps on a company device.

Is it safe to have multiple administrator accounts?

It is safe to have a second administrator account as a backup in case you forget your password. For everyday use, create a Standard User account instead. This reduces the risk of accidental system changes or malware gaining administrator access.