Unlocking Windows 11 Administrator Account: 9 Effective Solutions

Is your Windows 11 administrator account locked out? Discover these effective solutions for a rapid resolution.

Account lockouts can occur for several reasons, including:

• Excessive failed login attempts
• Account Lockout Policy configurations
• Domain Policy configurations
• Multiple failed remote access attempts
• A damaged user profile.

To resolve this issue, you’ll need reliable solutions that safeguard your data while saving you time. I’ve tested various methods to recover an admin account in Windows 11, and here are the most effective ones.

How To Fix Windows 11 Administrator Account Locked Out

Follow these steps sequentially:

Use Microsoft Account to Reset Password

This method tends to have a higher success rate than others. The caveat is that you must be online and have access to your Microsoft account credentials—either personal or work. Keep your account details ready and follow these steps:

1. Go to the Windows 11 Sign-In screen.
2. Select the admin account you wish to log in with from the bottom left corner.
3. Click on the I forgot my PIN link.

1. The Microsoft Account sign-in dialog will appear.
2. Input your password to proceed.

1. On the Approve sign-in request screen, utilize the Microsoft Authenticator app on your mobile device.
2. A warning screen will describe the risks involved.
3. Click Continue and follow the on-screen instructions to unlock your admin account.

If you decide not to proceed with the 8th step to reset your PIN and synchronize your Microsoft account from scratch, there’s an alternative you can try.

Close the Are you sure? dialog box.

Windows 11 should quickly display your user account’s avatar or initials and take you directly to the Desktop, bypassing the sign-in screen. This step will only succeed if the underlying user account files on the Windows 11 PC are not corrupted.

Use Another Administrator Account

1. If an alternate admin user can access the same PC, use that account to log in.
2. Click the Start menu button and type Computer.
3. Select the Computer Management tool located under the Best match section of the Start menu.
4. Within the Computer Management interface, choose the Local Users and Groups option on the left navigation panel.
5. Double-click the Users folder on the right side.
6. You should now see a list of all user accounts.
7. Select the locked-out user account.
8. If you cannot log in due to a password issue, right-click the account and select Set Password.

1. When the warning message appears, click Proceed and follow the on-screen instructions.
2. If the PIN does not seem to be the issue, right-click on the selected user account and choose Properties from the context menu.
3. Navigate to the General tab and uncheck the following boxes:
   • Account is disabled
   • Account is locked out
4. Click Apply and then OK.

Restart your PC to log in using your own admin account.

Use a Password Reset Disk

If you have a password reset disk, here’s how you can use it when the administrator account in Windows 11 is locked out:

1. On the Windows 11 login screen, input an incorrect PIN.
2. When you see the Use a password reset disk instead prompt, click that link.
3. Insert the USB stick or CD/DVD disk that you possess.
4. Follow the on-screen prompts in the Password Reset Wizard to create a new PIN or password.
5. Attempt to log back into your admin account.

If you haven’t created a Windows password reset disk, you can create one for future scenarios by following these steps:

1. Open the Start menu and type Control.
2. Click on the Control Panel tool from the Best match results.
3. Set the View by drop-down menu on the Control Panel interface to Small icons.

1. Select the User Accounts link from the list of Control Panel options.
2. Click on Create a password reset disk in User Accounts.

1. The disk will be generated for the currently logged-in account. To create a reset disk for a different account, sign in with that user on the PC.
2. The Forgotten Password Wizard will launch. Click Next.
3. Windows will automatically identify the USB stick or CD/DVD available on your PC.
4. If none exists, insert another USB stick or CD/DVD for the password reset disk.
5. Click Next.

1. Enter the password or PIN for the logged-in user account in the next window and click Next.
2. Follow the on-screen instructions to finish the process.

Activate Built-in Admin Account Using CMD

You can utilize a standard or admin account to enable the factory-configured administrator account, which is typically hidden from a standard user. Here’s how:

1. Press the Windows key and type CMD.
2. Click on the Command Prompt tool appearing below Best match.
3. Copy and paste the following command into the CMD terminal:

net user Administrator /active:yes

1. Press Enter to run the command.

1. If the standard CMD does not work, try running it with admin privileges. Choose Run as administrator from the Start menu when you search for CMD.

Restart your PC. When you reach the login screen, you should see a second user account labeled Administrator. Click on that to log in.

Enable Hidden Administrator Account Using PowerShell

Windows PowerShell provides enhanced access that allows you to personalize the built-in admin account, such as setting a custom password. First, log in using an alternative administrator account and follow these steps:

1. Press Windows + X on your keyboard to open the Power User context menu.
2. Select the Terminal (Admin) option.
3. PowerShell will launch with administrative privileges. Copy and paste the following script into the window:

# Run the script as Administrator

# Enable the built-in Administrator account
$adminAccount = “Administrator”
Enable-LocalUser -Name $adminAccount

# Optionally, set a password for the Administrator account
# You can set a strong password or skip this part if you want to keep it without a password.
$password = Read-Host -AsSecureString “Enter password for the Administrator account”
Set-LocalUser -Name $adminAccount -Password $password

# Optionally, ensure the account is not disabled
Set-LocalUser -Name $adminAccount -Enabled $true

Write-Host “Built-in Administrator account has been enabled.”

1. You may need to click on a Paste anyway pop-up.

1. The script will execute and pause to ask you for a new password.
2. Type in your desired password and press Enter.
3. The script will continue and display the message ‘Built-in Administrator account has been enabled.‘ once it finishes.

1. Restart your PC and sign in with the newly activated admin account.

Using the Local Security Policy Tool

The Local Security Policy tool allows Windows 11 to manage account lockout duration, threshold, and the lockout counter. Use another admin account to access the PC and make the necessary adjustments in this security tool:

1. Open the Run command by pressing Windows + R keys together.
2. Type secpol.msc in the Open box and hit Enter.

1. The Local Security Policy tool will open.
2. Double-click on the Account Policies directory in the left navigation panel.
3. Select the Account Lockout Policy listed below the Password Policy section.

1. On the right side, several binary files will appear. Here are the changes to implement:
   • Account lockout duration: 00 minutes
   • Account lockout threshold: 00 invalid logon attempts
   • Allow administrator account lockout: Disabled
   • Reset account lockout counter after: Not Applicable, these features disable automatically as you update the previous three binary files.

1. Close the Local Security Policy tool.
2. Open the Run command again to execute lusrmgr.msc.

1. The Local Users and Groups dialog will appear.
2. Select Users on the left and double-click your admin account on the right.
3. Check that the Account is disabled option isn’t checked on the General tab of the User Account Properties dialog.

1. If necessary, make adjustments, click Apply, and then OK.
2. Restart the PC and try logging in using your admin account again.

Use Command Prompt via Recovery Mode

If you cannot log in using any alternative admin account, you will need to enable the hidden admin or repair the existing account using the CMD interface in WinRE. Here’s how to do that:

1. Press and hold the Shift key, then click on the Power button on the login screen.

1. Select Restart. Keep the Shift key pressed until the Please wait screen appears after rebooting.
2. Release the Shift key when you see this screen.
3. You are now in WinRE.

1. Click on the Troubleshoot option.
2. Select Advanced options on the next screen.

1. Click on the Command Prompt option.

1. Enter the command below into the terminal:

net user adite /active:yes

1. Remember to adjust the username portion of the command following the net user syntax.
2. Press Enter.
3. If the account exists and the user profile files are intact, you’ll receive a confirmation.
4. Should the account not exist or if the user profile directory is corrupted, you’ll get an error message.

1. Restart the PC to now log in using your current admin account.
2. If you still cannot fix the existing user account, activate the hidden admin by following steps through to step 8 and use this command instead:

net user administrator /active:yes

Restart the PC and sign in with the admin profile.

Contact Microsoft Support

If none of the above solutions were effective, visit the Microsoft Windows Troubleshoot & repair portal and access the Need more help? form.

Input your issue and press Enter to create a support ticket and connect with a chat, phone, or email support representative.

Reset Windows 11 (Without Losing Data)

If you’re able to invest some time, consider attempting a Windows 11 reset by executing the following steps:

1. Use the previously mentioned steps to access WinRE.
2. Click Troubleshoot.
3. Press the Reset this PC button on the subsequent screen.

1. Select an option that fits your needs:
   • Keep my files: Retains personal files only, while Windows removes apps and settings.
   • Remove everything: This deletes all data from the installation drive.

1. The following screen will ask you to choose a source for the Windows 11 installation media.
2. If you’re online, select Cloud download.
3. If you’re offline, choose Local reinstall.

1. WinRE will take some time to process background files and settings.
2. When prompted, click the Reset button.

Summary

Now you know how to tackle a locked-out Windows 11 administrator account. Which method proved effective for you? If I missed anything, feel free to leave a comment below.

Source