Accounts: Administrator account status

This security setting determines whether the local Administrator account is enabled or disabled.


If you try to reenable the Administrator account after it has been disabled, and if the current Administrator password does not meet the password requirements, you cannot reenable the account. In this case, an alternative member of the Administrators group must reset the password on the Administrator account. For information about how to reset a password, see To reset a password.
Disabling the Administrator account can become a maintenance issue under certain circumstances.

Under Safe Mode boot, the disabled Administrator account will only be enabled if the machine is non-domain joined and there are no other local active administrator accounts. If the computer is domain joined the disabled administrator will not be enabled.

Policy path: 

Computer Configuration\Windows Settings\Local Policies\Security Options



Supported on: 

Windows XP SP2, Windows Server 2003

Registry settings: 

Not a registry key

Reboot required: 


Related content