How to enable or activate administrator user on Windows 11 pro

Question

How to enable or activate administrator user on Windows 11 pro

PhyllisAnne 0

We tried setting up a new laptop for a small church and cannot get the administrator user enabled. We set it up as a "work" computer and used an existing Microsoft 365 account to set it up. But that account does not have administrator abilities and cannot make changes to the computer despite being the only user. We have tried unchecking "account is disabled" under administrator in Computer Management but it says access is denied when we hit "apply." We have also tried using PowerShell and Command Prompt to override it and activate the administrator. When using the Command Prompt, it said it accepted the command but no change occurred. A new administrator user did not appear at log-in nor did anything appear in Computer Management to indicate it had been unlocked. We have tried to reset the computer to a personal computer to avoid needing an administrator but the log in credentials for the administrator are required to reset it. Is there another way to activate the administrator user or a way to force it to reset as a personal computer?

0 comments

2 answers

Your answer

Answer 1

Hi PhyllisAnne,

The quickest way is to download Windows 11 on a 8GB USB stick and re-install Windows by the following,

Create a Windows 11 installation USB.

Boot from the USB.

Delete all partitions.

Reinstall Windows.

During setup choose Set up for personal use (or create a local admin account first).

Once you have Windows setup you can still add the 365 account later. You can get a copy of Windows 11 from this Microsoft site,

https://www.microsoft.com/en-us/software-download/windows11?msockid=1e67aa7af65f65080808bd75f775644a

If you don't want to go down this route you will need to find the admin of the 365 Business account.

Answer 2

Reset the PC from Windows Recovery Environment and select Set up for personal use during the new Windows setup; without an existing local administrator, the already-tried Computer Management and command-line methods cannot elevate the current account.

Reset from Windows Recovery Environment

Warning: The recommended Remove everything option deletes user files, applications, and settings.

Back up any needed files first.
If device encryption or BitLocker is enabled, obtain the recovery key before proceeding. Because the laptop was configured with a work account, the key might be stored in that organization’s account. Microsoft cannot recreate a lost key.^1^
Open Windows Recovery Environment (Windows RE):
- From the sign-in screen, hold Shift while selecting Power > Restart.
- If that does not work, interrupt startup twice by holding the power button when the Windows or manufacturer logo appears. On the third startup, select Advanced options.^2^
Select Troubleshoot > Reset this PC.
Select Remove everything.
Select:
- Cloud download for a fresh Windows copy, or
- Local reinstall to use the files already on the laptop.
Leave the laptop connected to power and do not interrupt it, even if the screen remains black or it restarts several times.^3^
During the out-of-box setup, choose Set up for personal use rather than work or school setup.
Create the initial personal/local administrator account.
After reaching the desktop, add the Microsoft 365 account only where needed:
- For Office and other applications: Settings > Accounts > Email & accounts.
- If the device should later be connected to the organization: Settings > Accounts > Access work or school > Connect.

This avoids repeating the built-in Administrator activation commands that have already failed. Enabling that account or changing another account’s type normally requires existing administrator authorization.

If Reset this PC still requests unavailable credentials

Perform a clean installation from USB instead:

On another working PC, download and run the Windows 11 Media Creation Tool.
Create a bootable Windows 11 USB drive. Microsoft documents this under Create Windows 11 Installation Media.^4^
Boot the laptop from that USB. The manufacturer’s boot-menu key varies by model.
Install the same edition—Windows 11 Pro—to preserve compatibility with its existing license.
A clean installation that deletes or formats the Windows partition destroys its existing data, so confirm the backup first.
Choose personal use during setup and create the administrator account before adding the Microsoft 365 work account.

Alternative if the church intends to manage the PC as an organizational device

If the laptop is confirmed to be Microsoft Entra joined, an authorized tenant administrator can grant local administration without resetting it:

Sign in to the Microsoft Entra admin center as at least a Privileged Role Administrator.
Go to Entra ID > Devices > All devices > Device settings.
Select Manage Additional local administrators on all Microsoft Entra joined devices.
Select Add assignments, choose the intended administrator, and add it.
Wait up to four hours, then sign out and sign back in; locking and unlocking is insufficient.

This option requires Microsoft Entra ID P1 or P2 and applies the role to all Microsoft Entra-joined devices, not only this laptop.^5^

If the church does not have the required tenant role/licensing or does not want organizational management, use the Windows RE reset or USB clean-install path instead.

References