How to Create an Administrator User Account Using Command Prompt

This is a fast instructional exercise on the best way to make another administrator user account on a Windows PC.



 Create Admin User Account

1. Open the Command Prompt by clicking Start Menu --> All Programs --> Accessories, right-click on Command Prompt, and open it as an administrator. In Windows Vista and later versions of Window operating systems type cmd.exe into Start Screen or Start Menu, right-click on Cmd.exe, and open it as an administrator.

2. Add a new user account on the local computer:

Code:
net user username password /ADD

For example to add a new user account with the username John and with password fadf24as

Code:
net user John fadf24as /ADD

21hyGTu.png

3. Add new user account to the Administrators group:

Code:
net localgroup administrators [username] /add

For example to add a new user account with the username John to the Administrators group.

Code:
net localgroup administrators John /add

888pP4W.png

You should now have a new Administrator User Account on your PC!
 

FriendlyHobo

New Member
Local time
6:21 PM
Posts
1
This is a fast instructional exercise on the best way to make another administrator user account on a Windows PC.

 Create Admin User Account

1. Open the Command Prompt by clicking Start Menu --> All Programs --> Accessories, right-click on Command Prompt, and open it as an administrator. In Windows Vista and later versions of Window operating systems type cmd.exe into Start Screen or Start Menu, right-click on Cmd.exe, and open it as an administrator.

2. Add a new user account on the local computer:

Code:
net user username password /ADD

For example to add a new user account with the username John and with password fadf24as

Code:
net user John fadf24as /ADD


3. Add new user account to the Administrators group:

Code:
net localgroup administrators [username] /add

For example to add a new user account with the username John to the Administrators group.

Code:
net localgroup administrators John /add


You should now have a new Administrator User Account on your PC!

Alternatively, you can enable the "Hidden Built-In Administrator Account" on Windows 7,8,10

Type: CMD into the "Start Menu" or the "Windows Search Bar",
Right-Click and Run as Administrator.

admin1.pngadmin2.png

IMPORTANT:
Once enabled, this account will be available on the login page WITHOUT a password,
if this posses a security issue for you, you can add a password in the command prompt
after enabling.
The built-in Administrator account has a lot more privileges than a regular administrator account,
privileges that can easily get you into trouble, such as no annoying UAC prompts.
I recommend only enabling the built-in Administrator account if you are semi comfortable with its commands

Type to enable:
net user administrator /active:yes

Type to add password (optional):
net user administrator *
You will get a password prompt, enter desired password and again when asked

Note:
We didn't need to /add an account or add to the Administrators Group,
We have simply activated a pre-existing built in account.

Hope this helps
FriendlyHobo
 

My Computer

System One

  • Operating System
    Windows 10

FreeBooter

Active Member
Member
VIP
Local time
10:21 AM
Posts
328
Location
Turkey
Thread starter
Windows 10 includes a built-in Administrator account that, by default, is hidden and disabled for security reasons. Sometimes, you need to perform a bit of troubleshooting or make changes to your account that requires administrator access. For these reasons, you can enable the Administrator account and then disable it when you're finished.
 

My Computer

System One

  • Operating System
    Windows 10 Pro
    Computer type
    PC/Desktop
    Manufacturer/Model
    Gigabyte Technology Co., Ltd.
    CPU
    QuadCore Intel Core i5-6600
    Motherboard
    Gigabyte GA-Z170M-D3H
    Memory
    Corsair Vengeance LPX CMK8GX4M1A2666C16
    Graphics Card(s)
    Sapphire Radeon R9 380
    Sound Card
    Realtek ALC892
    Monitor(s) Displays
    Samsung SyncMaster U28E590
    Hard Drives
    Sata SSD
    Internet Speed
    25Mbps
    Browser
    Firefox
    Antivirus
    Windows Defender

Try3

Junior Member
Member
VIP
Local time
8:21 AM
Posts
63
The built-in Administrator account has a lot more privileges than a regular administrator account

That is incorrect. The Built-In Admin has no more privileges than any other Admin user account.
- It has UAC off by default but UAC can be turned off in any other Admin user account anyway.

Denis
 

My Computer

System One

  • Operating System
    Windows 10 Home x64 Version 20H2 Build 19042.985
    Manufacturer/Model
    Dell Inspiron 7779; HP Pavilion TP01-0026na desktop; Chuwi Hi10 Pro
    Internet Speed
    4G
    Browser
    FF, IE

TairikuOkami

Brony
Member
VIP
Local time
9:21 AM
Posts
53
Location
Trnava
The Built-In Admin has no more privileges than any other Admin user account.
I was under impression, that is has SYSTEM rights? :unsure:
 

My Computer

System One

  • Operating System
    Windows 11 Home
    CPU
    AMD Ryzen 5 3600 (07/19)
    Motherboard
    MSI B450 TOMAHAWK 7C02v1H6 (07/19)
    Memory
    4x 8GB ADATA XPG GAMMIX D10 DDR4 3200MHz CL16
    Graphics Card(s)
    MSI Radeon RX 580 ARMOR 8G OC (08/19)
    Sound Card
    Creative Sound Blaster Z (11/16)
    Monitor(s) Displays
    24" AOC G2460VQ6 (01/19) 1920×1080@75Hz + FreeSync (DisplayPort)
    Hard Drives
    ADATA XPG GAMMIX S11 Pro SSD 512GB (07/19)
    PSU
    Seasonic M12II-520 80 Plus Bronze (11/16)
    Case
    Lian Li PC-7NB + 3x Noctua NF-S12A FLX@700rpm
    Cooling
    CPU Cooler Noctua NH-U12S@700rpm
    Keyboard
    HP Pavilion Wireless Keyboard 600 (05/21)
    Mouse
    HP Wireless Silent 280M Mouse (05/21)
    Internet Speed
    300/30 Mbps via RouterOS (05/21) + TCP Optimizer
    Browser
    Microsoft Edge
    Antivirus
    None
    Other Info
    Headphones: Sennheiser RS170 (09/10) + Software: https://tinyurl.com/7hkjyhsj

barman58

Moderator
Staff member
Local time
8:21 AM
Posts
69
Location
Newport, South Wales, UK
The way that I understand things is ...

one way that the "hidden" admin is different from a user created admin is that it sits above the TrustedInstaller User in the permissions tree, so can perform some additional operations in the system folders especially those related to applications
 

My Computers

System One System Two

  • Operating System
    Windows 10 Pro x64 [Latest Release Preview]
    Computer type
    PC/Desktop
    Manufacturer/Model
    PC Specialist Ltd to my design
    CPU
    Intel® Core™ i7 Eight Core Processor i7-9700K (3.6GHz) OC 5.1Ghz 12MB Cache
    Motherboard
    Gigabyte Z390 AORUS Master: ATX, LG1151, USB 3.1, SATA 6GBs WIFI - RGB Ready
    Memory
    32GB Corsair VENGEANCE DDR4 2400MHz (4 x 8GB)
    Graphics Card(s)
    4GB NVIDIA GEFORCE GTX 1050 Ti - DVI, HDMI, DP
    Sound Card
    ASUS Xoner DG + SPDIF to 5.1 System + HDMI
    Monitor(s) Displays
    Samsung G276HL 27", (DVi) + Samsung 43" 4K HDR TV (HDMI)
    Hard Drives
    512GB ADATA SU800 M.2 2280 (560 MB/R, 520 MB/W) [System]
    Samsung 860 EVO 2.5" SSD, SATA 6Gb/s (upto 550MB/s R| 520MB/s W) [Fast Data]
    32GB INTEL® OPTANE MEMORY - USE WITH ...
    8TB SEAGATE BARRACUDA PRO 3.5", 7200 RPM 256MB CACHE
    PSU
    CORSAIR 750W TXm SERIES™ SEMI-MODULAR 80 PLUS® GOLD, ULTRA QUIET
    Case
    Corsair H55 Hydro Cooler w/ PCS Ultra Quiet Fans +3x120mm front +1x120mm Rear
    Cooling
    CORSAIR 750W TXm SERIES™ SEMI-MODULAR 80 PLUS® GOLD, ULTRA QUIET
    Keyboard
    Wireless Logitec MX Keys + K830 [Depending on where I'm Sat]
    Mouse
    Wireless Logitec - MX Master 3 + M570 Trackball
    Internet Speed
    72 MB Down 18.5 MB Up
    Browser
    Latest Chrome
    Antivirus
    BitDefender Total Security 2020
    Other Info
    Also run ...
    Laptop - Quad 8GB - Windows 10 Pro x64
    Netbook - Ubuntu
    Nexus 7 Android tablet x2
    Samsung 10.2" tablet
    Blackview TAB 8 4G Android Tablet c/w Keyboard
    Sony Z3 Android Smartphone
    Samsung S9 Plus Smartphone
    Samsung Note 20 Smartphone
    Wacom Intuos Pro Medium Pen Pad
    Wacom Intuos Pro Small Pen Pad
    Wacom Expresskeys Remote
    Loopdeck+ Graphics Controller
    Shuttle Pro v2 Control Pad
  • Operating System
    Windows 10 Pro x64 20H2- 19042 - 630
    Computer type
    Laptop
    Manufacturer/Model
    Dell XPS 17 9700
    CPU
    i7 10750H
    Motherboard
    Stock
    Memory
    32 GB
    Graphics card(s)
    Stock Intel + GTX 1650 Ti
    Sound Card
    Stock 4 speaker
    Monitor(s) Displays
    Stock 17"
    Screen Resolution
    3840 x 2160 HDR touchscreen
    Hard Drives
    2TB SSD, + 1TB external SSD, 4TB external
    PSU
    Stock
    Case
    Stock Alluminium / Carbon Fibre
    Cooling
    Stock + 2 fan cooling pad
    Mouse
    Stock Trackpad
    Keyboard
    Stock Illuminated
    Internet Speed
    72 MB Down 18.5 MB Up
    Browser
    Latest Chrome
    Antivirus
    BitDefender Total Security 2020
    Other Info
    See System 1

Try3

Junior Member
Member
VIP
Local time
8:21 AM
Posts
63
I was under impression, that is has SYSTEM rights? :unsure:
one way that the "hidden" admin is different from a user created admin is that it sits above the TrustedInstaller User in the permissions tree, so can perform some additional operations in the system folders especially those related to applications

Neither of those beliefs are correct.
You can demonstrate that for yourselves by attempting to alter a folder/Reg key for which only the System/TI has permission [without taking ownership].
When I did this for myself, I created a folder on a USB stick with restricted permissions. Then I was able to clean up quickly afterwards by reformatting the stick.

All the best,
Denis
 
Last edited:

My Computer

System One

  • Operating System
    Windows 10 Home x64 Version 20H2 Build 19042.985
    Manufacturer/Model
    Dell Inspiron 7779; HP Pavilion TP01-0026na desktop; Chuwi Hi10 Pro
    Internet Speed
    4G
    Browser
    FF, IE

Try3

Junior Member
Member
VIP
Local time
8:21 AM
Posts
63
Did you manage to complete the suggested demonstration?

Denis
 

My Computer

System One

  • Operating System
    Windows 10 Home x64 Version 20H2 Build 19042.985
    Manufacturer/Model
    Dell Inspiron 7779; HP Pavilion TP01-0026na desktop; Chuwi Hi10 Pro
    Internet Speed
    4G
    Browser
    FF, IE

johngalt

Well-known member
WQ Insider
Member
VIP
Local time
3:21 AM
Posts
785
Location
3rd Rock
Sure would be nice to have documentation supporting this.
 

My Computer

System One

  • Operating System
    Windows 10 Pro X64
    Computer type
    PC/Desktop
    Manufacturer/Model
    The Beast Model A (homebrew)
    CPU
    AMD Ryzen 9 3950X
    Motherboard
    MSI MEG X570 GODLIKE
    Memory
    4 * Corsair Vengeance 32 GB 3600 MHz
    Graphics Card(s)
    eVGA GeForce GTX 970 SSC ACX 2.0 (04G-P4-3979-KB)
    Sound Card
    Realtek® ALC1220 Codec
    Monitor(s) Displays
    2 * Lenovo LT2323pwA Widescreeen @ 1920*1080
    Hard Drives
    3x Sabrent Rocket PCIe Gen4 NVMe M.2 1 TB SSD (SB-ROCKET-NVMe4-1TB)
    SanDisk Ultra SDSSDHII-960G-G25 960 GB SATA III SSD
    2 * Seagate Barracuda 7200.12 ST31000528AS 1TB 7200 RPM --> RAID1
    PSU
    PC Power & Cooling’s Silencer Series 1050 Watt, 80 Plus Platinum
    Case
    Fractal Design Define 7 XL Dark ATX Full Tower Case
    Cooling
    NZXT KRAKEN Z73 73.11 CFM Liquid CPU Cooler + Air (3 * 140mm fans from case)
    Keyboard
    SteelSeries Apex Pro Wired Gaming Keyboard
    Mouse
    Logitech MX Master 3 Wireless Laser Mouse(shared)
    Internet Speed
    AT&T Lightspeed Gigabit duplex
    Browser
    Nightly|Chrome|Canary|Edge+ (Chromium) (in all 4 flavors)
    Antivirus
    Windows Defender + MB 4

Try3

Junior Member
Member
VIP
Local time
8:21 AM
Posts
63
John,

Sure would be nice to have documentation supporting this.
No MS documentation is clear about this. That's why I suggested running a demonstration.

A related tutorial on the subject is clear
Enable or Disable Built-in Elevated Administrator Account - TenForumsTutorials
but it's not written by MS.

All the best,
Denis

If you meant about the net user commands that this thread started off with, you can start off seeing their help info by entering [in a cmd or ps window]
Code:
net user /?
Code:
net /?
 

My Computer

System One

  • Operating System
    Windows 10 Home x64 Version 20H2 Build 19042.985
    Manufacturer/Model
    Dell Inspiron 7779; HP Pavilion TP01-0026na desktop; Chuwi Hi10 Pro
    Internet Speed
    4G
    Browser
    FF, IE

johngalt

Well-known member
WQ Insider
Member
VIP
Local time
3:21 AM
Posts
785
Location
3rd Rock
I think I've found actual confirmation from Microsoft. But it is really, really buried in their docs. Took me a lot of digging around to find this one.


From the Reference section:

When the Admin Approval Mode is enabled, the local administrator account functions like a standard user account, but it has the ability to elevate privileges without logging on by using a different account. In this mode, any operation that requires elevation of privilege displays a prompt that allows the administrator to permit or deny the elevation of privilege. If Admin Approval Mode is not enabled, the built-in Administrator account runs all applications by default with full administrative privileges. [coloring and bold typeface by me] By default, Admin Approval Mode is set to Disabled.

So, taking that in total, if it had anything above administrator level privileges, it would specifically say so here, and this option would have the ability to allow / disallow (depending upon how it is set) to let the native Administrator account run with System / TI level privileges. It specifically states otherwise, as this particular setting can make the native Administrator account act just like every other account with administrator-level privileges (i.e. those that are a part of the administrators group).

Additionally, this also lends support to the same concept, if you read deep enough into the doc: Accounts Administrator account status (Windows 10) - Windows security

From the Safe mode considerations section:

When you start a device in safe mode, the disabled administrator account is enabled only if the computer is non-domain joined and there are no other active local administrator accounts [coloring and bold typeface by me]. In this case, you can access the computer by using safe mode with the current administrative credentials. If the computer is joined to a domain, the disabled administrator account is not enabled.

You have to read between the lines, but it would be a HUGE security violation to be able to boot into Safe Mode and use the credentials from local administrator account and get System / TI level access for as long as Safe Mode was running.

Thanks, @Try3, for setting the record straight for us.
 

My Computer

System One

  • Operating System
    Windows 10 Pro X64
    Computer type
    PC/Desktop
    Manufacturer/Model
    The Beast Model A (homebrew)
    CPU
    AMD Ryzen 9 3950X
    Motherboard
    MSI MEG X570 GODLIKE
    Memory
    4 * Corsair Vengeance 32 GB 3600 MHz
    Graphics Card(s)
    eVGA GeForce GTX 970 SSC ACX 2.0 (04G-P4-3979-KB)
    Sound Card
    Realtek® ALC1220 Codec
    Monitor(s) Displays
    2 * Lenovo LT2323pwA Widescreeen @ 1920*1080
    Hard Drives
    3x Sabrent Rocket PCIe Gen4 NVMe M.2 1 TB SSD (SB-ROCKET-NVMe4-1TB)
    SanDisk Ultra SDSSDHII-960G-G25 960 GB SATA III SSD
    2 * Seagate Barracuda 7200.12 ST31000528AS 1TB 7200 RPM --> RAID1
    PSU
    PC Power & Cooling’s Silencer Series 1050 Watt, 80 Plus Platinum
    Case
    Fractal Design Define 7 XL Dark ATX Full Tower Case
    Cooling
    NZXT KRAKEN Z73 73.11 CFM Liquid CPU Cooler + Air (3 * 140mm fans from case)
    Keyboard
    SteelSeries Apex Pro Wired Gaming Keyboard
    Mouse
    Logitech MX Master 3 Wireless Laser Mouse(shared)
    Internet Speed
    AT&T Lightspeed Gigabit duplex
    Browser
    Nightly|Chrome|Canary|Edge+ (Chromium) (in all 4 flavors)
    Antivirus
    Windows Defender + MB 4

Try3

Junior Member
Member
VIP
Local time
8:21 AM
Posts
63
And thank you for your link [for its Safe mode considerations para] . I don't think I had ever seen an MS document that explicitly stated the conditions for the Administrator account to be automatically enabled in Safe mode.

I have added a link to the safe mode para in my para 3.8 of Fix UAC prompt has greyed out or missing Yes button - TenForumsTutorials in case anybody ever wants confirmation about what ought to happen.

All the best,
Denis
 
Last edited:

My Computer

System One

  • Operating System
    Windows 10 Home x64 Version 20H2 Build 19042.985
    Manufacturer/Model
    Dell Inspiron 7779; HP Pavilion TP01-0026na desktop; Chuwi Hi10 Pro
    Internet Speed
    4G
    Browser
    FF, IE

johngalt

Well-known member
WQ Insider
Member
VIP
Local time
3:21 AM
Posts
785
Location
3rd Rock
Agreed. I had not known about that before, either. But, in retrospect, it makes perfect sense.

Nice tut, BTW!
 

My Computer

System One

  • Operating System
    Windows 10 Pro X64
    Computer type
    PC/Desktop
    Manufacturer/Model
    The Beast Model A (homebrew)
    CPU
    AMD Ryzen 9 3950X
    Motherboard
    MSI MEG X570 GODLIKE
    Memory
    4 * Corsair Vengeance 32 GB 3600 MHz
    Graphics Card(s)
    eVGA GeForce GTX 970 SSC ACX 2.0 (04G-P4-3979-KB)
    Sound Card
    Realtek® ALC1220 Codec
    Monitor(s) Displays
    2 * Lenovo LT2323pwA Widescreeen @ 1920*1080
    Hard Drives
    3x Sabrent Rocket PCIe Gen4 NVMe M.2 1 TB SSD (SB-ROCKET-NVMe4-1TB)
    SanDisk Ultra SDSSDHII-960G-G25 960 GB SATA III SSD
    2 * Seagate Barracuda 7200.12 ST31000528AS 1TB 7200 RPM --> RAID1
    PSU
    PC Power & Cooling’s Silencer Series 1050 Watt, 80 Plus Platinum
    Case
    Fractal Design Define 7 XL Dark ATX Full Tower Case
    Cooling
    NZXT KRAKEN Z73 73.11 CFM Liquid CPU Cooler + Air (3 * 140mm fans from case)
    Keyboard
    SteelSeries Apex Pro Wired Gaming Keyboard
    Mouse
    Logitech MX Master 3 Wireless Laser Mouse(shared)
    Internet Speed
    AT&T Lightspeed Gigabit duplex
    Browser
    Nightly|Chrome|Canary|Edge+ (Chromium) (in all 4 flavors)
    Antivirus
    Windows Defender + MB 4
Top