Reset Built-in Administrator Password (Windows)

This guide walks you through resetting the password for the built-in Administrator account on Windows 10 and Windows 11. The built-in Administrator account is a special account that is disabled by default, but when enabled, it can be used to recover access to your PC if you forget your own user password. You’ll need to be able to boot into the Windows Recovery Environment (WinRE) or have another admin account available.

What You’ll Need

• Access to a Windows PC (yours or another one) to create a bootable USB drive or access recovery options.
• A USB flash drive (8 GB or larger) if you need to create installation media.
• Another computer with internet access to download the Windows Media Creation Tool (if needed).
• Basic knowledge of the Windows command prompt (you’ll type a few commands).

Step-by-Step

There are two main methods: one using the built-in Administrator account from the login screen (if it’s already enabled), and another using the Windows Recovery Environment. The steps below cover the most reliable method using the Recovery Environment.

Method 1: Using the Built-in Administrator from the Login Screen (if enabled)

1. On the Windows login screen, look for the Administrator account icon in the bottom-left corner (or click “Other user” and type Administrator).
2. If the Administrator account is enabled and has no password, you can log in directly. If it has a password you don’t know, skip to Method 2.
3. Once logged in, press Win + X and select “Computer Management”.
4. Go to “Local Users and Groups” > “Users”. Right-click on your regular account and choose “Set Password”. Follow the prompts to set a new password.
5. Log out and log back in with your regular account using the new password.

Method 2: Using the Windows Recovery Environment (WinRE)

1. Boot your PC from a Windows installation USB or recovery drive. If you don’t have one, create it on another PC using the Windows Media Creation Tool.
2. When the Windows Setup screen appears, click “Next” and then click “Repair your computer” (bottom-left corner).
3. Choose “Troubleshoot” > “Advanced options” > “Command Prompt”.
4. In the Command Prompt, type diskpart and press Enter.
5. Type list volume and press Enter. Note the drive letter of your Windows installation (usually C: but might be D: or E: in this environment). Type exit to leave diskpart.
6. Now type the following commands, replacing C: with the correct drive letter if needed:

   move C:\Windows\System32\Utilman.exe C:\Windows\System32\Utilman.exe.bak
   copy C:\Windows\System32\cmd.exe C:\Windows\System32\Utilman.exe

   Press Enter after each line. This temporarily replaces the Ease of Access utility with a command prompt.

7. Type wpeutil reboot to restart the PC. Remove the USB drive when prompted.
8. On the login screen, click the “Ease of Access” icon (the little person with a clock) at the bottom-right. This will open a Command Prompt window.
9. In that Command Prompt, type net user Administrator /active:yes and press Enter. This enables the built-in Administrator account.
10. Now type net user Administrator * and press Enter. You’ll be prompted to enter a new password for the Administrator account. Type it twice and press Enter.
11. Close the Command Prompt and log in with the Administrator account and the new password you just set.
12. Once logged in, open a Command Prompt as administrator and restore the original Utilman.exe file by typing:

    move C:\Windows\System32\Utilman.exe.bak C:\Windows\System32\Utilman.exe

13. Now you can reset the password for your regular user account via Computer Management (as in Method 1) or by using the net user command.

Common Mistakes

• Wrong drive letter: In the recovery environment, the Windows drive might not be C:. Always check with diskpart first.
• Forgetting to restore Utilman.exe: If you don’t restore it, the Ease of Access button will open a command prompt, which is a security risk.
• Typing commands incorrectly: A single typo can cause the command to fail. Double-check each line.
• Using a 32-bit command prompt on a 64-bit system: Ensure you’re using the correct command prompt (the one from WinRE is fine).

Tips

• Always create a password reset disk for your regular account when you set up Windows.
• Keep the built-in Administrator account disabled after you’re done to maintain security.
• If you have BitLocker enabled, you may need the recovery key to access the drive from WinRE.
• Use a strong password for the Administrator account if you leave it enabled.

Troubleshooting

If the steps don’t work, try these:

• Command Prompt doesn’t open from Ease of Access: Make sure you copied cmd.exe correctly. If not, repeat the copy command in WinRE.
• “Access is denied” when using net user: This usually means the Administrator account is not active. Try net user Administrator /active:yes first.
• Can’t boot from USB: Change the boot order in BIOS/UEFI (press F2, F12, DEL, or ESC during startup).
• BitLocker recovery key needed: If you have BitLocker, you’ll be prompted for the recovery key when booting from WinRE. Find it in your Microsoft account or where you stored it.
• If all else fails: Use a third-party password recovery tool (at your own risk) or reinstall Windows (this will erase your files unless you back them up).

Frequently Asked Questions

Is it legal to reset the Administrator password?

Yes, as long as you own the computer or have permission from the owner. It’s a standard recovery procedure.

Will this work if I have a Microsoft account?

Yes, the built-in Administrator account is local, and this method works regardless of whether your regular account is a Microsoft account or a local account.

Can I reset the password without a USB drive?

If you can access the login screen, you can try the Ease of Access trick directly (if you have a command prompt available). Otherwise, you’ll need some form of bootable media.

What if I don’t have another computer to create a USB?

You can use your phone to download the Windows ISO and write it to a USB using an OTG adapter, or borrow a friend’s computer.

Will this erase my files?

No, this method only changes passwords. Your files remain intact.

How do I disable the built-in Administrator account after resetting?

Open Command Prompt as admin and type net user Administrator /active:no.

Related

• Install Epic Games Store Linux: Full Guide
• Fix Encrypt Contents to Secure Data Greyed Out Windows 11
• VPN 800 Error: Causes and Fixes