Enable Default Account on Windows 10: 6 Fixes

If Windows 10 is stuck on a login screen that shows a disabled or missing user account, you can usually fix it by re-enabling the account through the Local Users and Groups snap-in, the net user command, or the registry. This guide covers the most reliable methods for both local accounts and Microsoft accounts, including what to do if you are locked out entirely.

Why an Account Becomes Disabled

Windows 10 disables a user account for several reasons. The most common is a system policy that locks an account after too many failed login attempts, but an administrator can also disable an account manually, a third-party security suite can do it, or a Windows update can reset permissions. The built-in Administrator account is often disabled by default, and some users accidentally disable their only admin account while trying to tighten security. When the account is disabled, the login screen either shows the username but rejects the password, or it does not show the account at all.

Method 1: Use Local Users and Groups (lusrmgr.msc)

This is the fastest way if you can log in with another administrator account.

1. Press Win + R, type lusrmgr.msc, and press Enter.
2. Select Users in the left pane.
3. Double-click the disabled account. A red down-arrow icon marks disabled accounts.
4. Uncheck Account is disabled and click OK.

If you get an “Access denied” error, you are not in the Administrators group. Try the Command Prompt method below, or boot into Safe Mode and try again.

Method 2: Use the Command Prompt (net user)

The net user command works in a standard Command Prompt or in the Windows Recovery Environment (WinRE).

1. Open Command Prompt as administrator (right-click Start, select Command Prompt (Admin) or Windows PowerShell (Admin)).
2. Type net user to list all accounts.
3. Find the exact username, then type: net user username /active:yes. Replace username with the actual account name.
4. Press Enter. You should see “The command completed successfully.”

If the username has spaces, put it in quotes: net user "John Doe" /active:yes. This method also works for the built-in Administrator account, whose default name is Administrator.

Method 3: Re-enable the Built-in Administrator in Safe Mode

If you have no other admin account, boot into Safe Mode. The built-in Administrator account is often available there even when disabled, because Windows enables it temporarily for recovery.

1. Restart your PC. As it boots, press F8 repeatedly (or hold Shift while clicking Restart in the login screen).
2. Go to Troubleshoot > Advanced options > Startup Settings > Restart.
3. Press 4 or 5 to boot into Safe Mode.
4. Log in with the built-in Administrator account (it may have no password).
5. Open Command Prompt as admin and run net user Administrator /active:yes.

If the built-in Administrator has a password you do not know, you cannot use this method without resetting the password, which requires installation media.

Method 4: Use the Registry Editor

This is a fallback when the other tools fail. The registry stores account flags under the SAM hive, and you can edit them directly.

1. Open Registry Editor as administrator (Win + R, type regedit).
2. Navigate to HKEY_LOCAL_MACHINE\SAM\SAM. You may need to take ownership of the SAM key first by right-clicking it, selecting Permissions, and granting Administrators full control.
3. Drill down to Domains\Account\Users\Names\<username>. Note the key name (e.g., 000001F4).
4. Open that key, and double-click the F value. The second byte (the one after the first two hex digits) controls the account flag. A value of 11 means disabled; change it to 10 or 01.

This is risky: a wrong edit can corrupt the SAM hive. Only use it if you are comfortable with hex editing, and back up the key before changing anything.

Method 5: Reset the Account via Installation Media

If you are completely locked out and no admin account works, you can use a Windows 10 installation USB to run the net user command from the recovery environment.

1. Boot from the installation USB.
2. Click Next, then Repair your computer (bottom-left).
3. Go to Troubleshoot > Advanced options > Command Prompt.
4. Type diskpart, then list volume to find the drive letter of your Windows partition (often C: or D:).
5. Exit diskpart, then type: net user username /active:yes (use the actual username).
6. Close the prompt and restart.

This does not reset the password, so you still need to know it. If you do not, you would need a password reset tool, which is beyond the scope of this guide.

What About Microsoft Accounts?

Microsoft accounts (the ones with an email address) are not disabled the same way as local accounts. If your Microsoft account is blocked, it is usually due to security flags (suspicious sign-in, too many attempts) or an expired password. In that case, go to account.live.com/password/reset from another device to unlock it. Once unlocked, you can log in normally. The net user command does not work for Microsoft accounts because they are authenticated online.

Frequently Asked Questions

Can I enable an account without admin rights?

No. Enabling or disabling an account requires administrator privileges. If you do not have an admin account that works, you must use the installation media method or Safe Mode with the built-in Administrator.

Why does the login screen not show my account at all?

This usually means the account is disabled or the user profile is corrupted. Try pressing Ctrl + Alt + Del twice on the login screen, then type the username manually. If that fails, use the methods above to re-enable it.

Will enabling the built-in Administrator pose a security risk?

Yes, if left enabled with no password. The built-in Administrator bypasses UAC and has full system access. After you finish, disable it again with net user Administrator /active:no and set a strong password on your own account.

What if I get “Access denied” when running net user?

That means your Command Prompt is not elevated. Right-click the Command Prompt icon and select Run as administrator. If you are in Safe Mode, make sure you are logged in as the built-in Administrator.

Does this work on Windows 11?

Yes, the same methods work on Windows 11, since the account system is nearly identical. The menus may look slightly different, but the commands and registry paths are the same.

Related

• Chromebook vs Windows 2-in-1: How to Choose
• How to Check MBR or GPT in BIOS
• Microsoft 365 Apps Error Codes: Fixes That Work