Losing admin access on your own PC is genuinely infuriating, and it happens more often than you'd think. Someone borrows the machine, grants themselves Administrator rights, demotes your account to Standard user, and suddenly you can't install software, change settings, or manage accounts. You're locked out of your own computer. This guide covers exactly how to restore administrator rights on Windows 10 and 11, from the quickest possible fix down to Safe Mode and command-line methods for the worst-case scenarios.
What Actually Causes You to Lose Administrator Rights?
Before jumping into fixes, it helps to understand what happened under the hood, because the cause determines which fix will actually work for you.
The most common scenario: your brother-in-law was logged in as you (or you let him use the machine briefly), he opened Settings or Control Panel, created a new local account for himself, set it as Administrator, then changed your account type to Standard user. Windows allows any administrator to do this to any other account, including the one that originally owned the machine. There's no warning, no confirmation email, nothing. It takes about 45 seconds and leaves you completely locked out.
A slightly more devious version involves the hidden built-in Administrator account. This account exists on every Windows installation but is disabled by default. If someone enables it via Command Prompt (net user administrator /active:yes), logs in as that account, and then demotes your account, you end up with a situation where the built-in Administrator is active but you don't know its password. According to Microsoft's documentation on default user accounts, the built-in Administrator has no password by default on local installs, which is both useful and a security problem.
Sometimes the issue is simpler. Your account is still Administrator, but the password was changed. You can see your account on the sign-in screen but can't log in. That's a different problem with a different fix (resetting the password from another admin account).
And occasionally, especially on work laptops or machines that were ever connected to a company network, the device is domain-joined or managed by an organisation. In that case, local account changes may not stick at all, and you'd need whoever manages the domain to sort it. If the machine is personal and bought by you, this almost certainly doesn't apply.
The bottom line: to restore administrator rights, you need at least one administrator account somewhere on the machine that you can access. The solutions below go from easiest (another admin account exists and you know the password) to hardest (no admin access at all).
Restore Administrator Rights: Quick Fix
This is the fastest route and works in the majority of cases. Before assuming the worst, check whether you can simply log in as him and use his account to fix yours.
Use Any Available Admin Account to Promote Yourself Easy
- Check the sign-in screen
Restart or log out. On the Windows 10 or 11 sign-in screen, look at the bottom-left corner. You'll see a list of accounts on the machine. Any account that was set as Administrator will be accessible here. - Sign in with his account
If you know his password (or if he didn't set one), sign in as him. You're not doing anything wrong here, it's your machine. - Open Settings and find your account
Go to Settings > Accounts > Other users (Windows 11) or Family & other users (Windows 10). You'll see your account listed there as a Standard user. - Change your account type
Select your account, click Change account type, choose Administrator from the dropdown and click OK. - Verify it worked
Open Control Panel > User Accounts > User Accounts. Your account should now show Administrator next to it. Sign out and back in as yourself to confirm.
More Ways to Restore Administrator Rights: Take Back Full Control
Once you've regained admin access, you'll want to sort out his account and make sure this can't happen again. Here's how to do that properly, plus what to do if the quick fix didn't work because you don't know his password.
Downgrade or Remove His Account Easy
- Sign in as yourself
Now that you've restored administrator rights to your account, sign in as yourself. - Open Other users settings
Settings > Accounts > Other users. Select his account. - Downgrade him to Standard user
Click Change account type, select Standard user, click OK. He can still use the machine but can't install software, change system settings, or touch other accounts. - Or remove the account entirely
If you'd rather he doesn't have an account at all, select his account and click Remove. Windows will warn you that his profile data will be deleted. Confirm if you're happy with that.
Reset a Changed Password via Computer Management Easy
- Open Computer Management
Press Win + X and select Computer Management from the menu. - Navigate to Local Users and Groups
Expand Local Users and Groups in the left panel, then click Users. You'll see every account on the machine. - Set a new password on your account
Right-click your account name and choose Set password. Click Proceed on the warning (this is expected), then enter and confirm your new password. - Sign out and back in
Sign out and log back in with your new password to confirm it works.
If you're dealing with a Microsoft account and you've been locked out, the online recovery process is actually pretty reliable as long as you still have access to the recovery email or phone number attached to the account. That's the fastest route for Microsoft account lockouts. For local account issues on a shared family machine, the Computer Management method above is the one we use most often in remote sessions.
For anyone who's also dealing with a machine that's been acting oddly since someone else had access, it's sensible to check for any software they may have installed. If you suspect something dodgy was put on the machine, our guide on removing malware from Windows walks through a full cleanup process.
Advanced Ways to Restore Administrator Rights When You're Completely Locked Out
No admin account you can access. Don't know his password. Your account is Standard user and you're stuck. This is the harder situation, but there are still options before you resort to reinstalling Windows.
Boot into Safe Mode and Use the Built-in Administrator Medium
- Boot to Advanced Startup
Hold Shift on your keyboard while clicking Restart from the Start menu or sign-in screen. Keep holding Shift until you see the blue Advanced Startup screen. - Navigate to Startup Settings
Click Troubleshoot > Advanced options > Startup Settings, then click Restart. - Choose Safe Mode
After the machine restarts, press 4 or F4 to boot into Safe Mode. Wait for it to load fully. - Look for the built-in Administrator
On the Safe Mode sign-in screen, check whether an account named simply Administrator appears. On some Windows installations, this account becomes visible in Safe Mode even when it's hidden normally. - Sign in as Administrator
If it appears and has no password set (which is common on personal PCs), just click Sign in without entering anything. If it has a password you don't know, this route won't work. - Promote your account
Open Control Panel > User Accounts > Manage another account, select your account, choose Change the account type, set it to Administrator and apply. Restart normally afterwards.
Restore Administrator Rights via Command Prompt Medium
- Open an elevated Command Prompt
This only works if you have admin access somewhere. Press Win + X and select Windows Terminal (Admin) or Command Prompt (Admin). If you're prompted by UAC, click Yes. - Add yourself to the Administrators group
Type the following and press Enter, replacing YourUserName with your actual Windows username:net localgroup Administrators YourUserName /add
You should see "The command completed successfully." - Remove him from the Administrators group
Type:net localgroup Administrators HisUserName /delete
This removes his admin rights without deleting his account. - Disable the built-in Administrator if it was enabled
Open Computer Management > Local Users and Groups > Users, right-click Administrator, choose Properties, tick Account is disabled and click OK. This closes the backdoor he may have used. - Restart and verify
Restart the machine, sign in as yourself and confirm your account shows Administrator in Control Panel > User Accounts.
If none of the above work because there is genuinely no admin account accessible anywhere on the machine, your supported options are: using a password reset disk you created previously (if you made one), Microsoft account online recovery (if your account is a Microsoft account), or a clean reinstall of Windows. A reinstall sounds drastic but it's actually not that painful if your files are on OneDrive or backed up externally. The clean install process for Windows 11 is something we cover separately if you end up needing it.
One more thing. If the machine is a work laptop or was ever connected to a company network, admin rights may be managed centrally via Active Directory or Azure AD. In that case, none of the local fixes above will give you permanent admin access. Only the organisation's IT admin can change that. Microsoft's official guidance on local accounts explains the distinction between local and domain accounts if you're unsure which applies to you.
For anyone who's been locked out of a machine that also has important data on it and you're nervous about making things worse, this is exactly the kind of thing we sort via remote support. It's lower risk than attempting advanced fixes blind.
Preventing This From Happening Again
Once you've managed to restore administrator rights, take ten minutes to make sure this can't happen again. The single most important thing: never let anyone use your administrator account directly. Create a Standard user account for anyone else who needs to use the machine, including family members. A Standard user can browse the web, use Office, watch videos, and do pretty much everything a normal person needs. They just can't install software or change system settings without an admin password. That's the point.
Keep at least two administrator accounts that you personally control. If one gets locked or the password gets changed, you have a backup route in. Both accounts should have strong passwords that you don't share with anyone. If you're using a Microsoft account to sign in, make sure your recovery email and phone number are up to date so you can always recover access online.
Here are the priority steps, in order of importance:
- Create a second admin account under your control and set a password on it now, before anything else.
- Change any relative or guest accounts to Standard user immediately.
- Set a BIOS or UEFI password if you're particularly concerned about physical access to the machine.
- Create a password reset disk for your local admin account (search "password reset disk" in the Start menu). It takes two minutes and could save you hours later.
- Disable the built-in Administrator account via Computer Management > Local Users and Groups > Users > right-click Administrator > Properties > tick Account is disabled. This removes one potential backdoor.
If you share the machine with others legitimately, have a clear conversation about who the owner administrator is. It sounds obvious, but a lot of these situations start because someone didn't realise what they were doing when Windows offered to make them an administrator. For more on keeping a shared Windows machine secure, our guide on securing a shared Windows PC covers the full setup.
Restore Administrator Rights: Summary
To restore administrator rights after a relative locked you out, start by checking whether you can sign in with his account (or any other admin account on the machine) and use it to promote yourself back to Administrator via Settings > Accounts > Other users. If that's not possible because you don't know his password, try Safe Mode to see if the built-in Administrator account is accessible. From any admin account, you can also use net localgroup Administrators YourUserName /add in an elevated Command Prompt to add yourself back directly. Once you've restored administrator rights, downgrade or remove his account, set strong passwords on all admin accounts, and give anyone else a Standard user account going forward. That's the whole fix.