How to enable or activate administrator user on Windows 11 pro

Reset the PC from Windows Recovery Environment and select Set up for personal use during the new Windows setup; without an existing local administrator, the already-tried Computer Management and command-line methods cannot elevate the current account.

Reset from Windows Recovery Environment

Warning: The recommended Remove everything option deletes user files, applications, and settings.

1. Back up any needed files first.
2. If device encryption or BitLocker is enabled, obtain the recovery key before proceeding. Because the laptop was configured with a work account, the key might be stored in that organization’s account. Microsoft cannot recreate a lost key.^1^
3. Open Windows Recovery Environment (Windows RE):
   • From the sign-in screen, hold Shift while selecting Power > Restart.
   • If that does not work, interrupt startup twice by holding the power button when the Windows or manufacturer logo appears. On the third startup, select Advanced options.^2^
4. Select Troubleshoot > Reset this PC.
5. Select Remove everything.
6. Select:
   • Cloud download for a fresh Windows copy, or
   • Local reinstall to use the files already on the laptop.
7. Leave the laptop connected to power and do not interrupt it, even if the screen remains black or it restarts several times.^3^
8. During the out-of-box setup, choose Set up for personal use rather than work or school setup.
9. Create the initial personal/local administrator account.
10. After reaching the desktop, add the Microsoft 365 account only where needed:
    • For Office and other applications: Settings > Accounts > Email & accounts.
    • If the device should later be connected to the organization: Settings > Accounts > Access work or school > Connect.

This avoids repeating the built-in Administrator activation commands that have already failed. Enabling that account or changing another account’s type normally requires existing administrator authorization.

If Reset this PC still requests unavailable credentials

Perform a clean installation from USB instead:

1. On another working PC, download and run the Windows 11 Media Creation Tool.
2. Create a bootable Windows 11 USB drive. Microsoft documents this under Create Windows 11 Installation Media.^4^
3. Boot the laptop from that USB. The manufacturer’s boot-menu key varies by model.
4. Install the same edition—Windows 11 Pro—to preserve compatibility with its existing license.
5. A clean installation that deletes or formats the Windows partition destroys its existing data, so confirm the backup first.
6. Choose personal use during setup and create the administrator account before adding the Microsoft 365 work account.

Alternative if the church intends to manage the PC as an organizational device

If the laptop is confirmed to be Microsoft Entra joined, an authorized tenant administrator can grant local administration without resetting it:

1. Sign in to the Microsoft Entra admin center as at least a Privileged Role Administrator.
2. Go to Entra ID > Devices > All devices > Device settings.
3. Select Manage Additional local administrators on all Microsoft Entra joined devices.
4. Select Add assignments, choose the intended administrator, and add it.
5. Wait up to four hours, then sign out and sign back in; locking and unlocking is insufficient.

This option requires Microsoft Entra ID P1 or P2 and applies the role to all Microsoft Entra-joined devices, not only this laptop.^5^

If the church does not have the required tenant role/licensing or does not want organizational management, use the Windows RE reset or USB clean-install path instead.

References

1. Find your BitLocker recovery key
2. Windows recovery environment | Microsoft Support
3. Windows 11
4. Create installation media for Windows | Microsoft Support
5. How to manage the local administrators group on Microsoft Entra joined devices