Tuesday, March 29, 2011

Enable WINDOWS 7 Administrator Account with Group Policy (GPO)

Administrator account is disabled by default on Windows 7.
Group Policy can be used to enable it.
Create a new GPO and go to: Computer configuration -> Policies -> Windows Settings -> Security Settings -> Security Options. On Right Pane click on Accounts: Administrator account status and change the settings to Enabled.

To enter a password for the Local Administrator Account, Group Policy Preferences can be used:

Go to Preferences -> Control Panel Settings -> and right click on Local Users and Groups. Choose: New -> Local User. From Drop-down menu on User name choose: Administrator (built-in).
Put the password and confirm it.


  1. Hi thank you for this, just one question.
    If you do this in the Default Domain Policy will it also chance the Administrator password on the domain controller?

  2. I don't know, BUT the Administrator on the Domain-Controller is an AD-Account, not a local one!

  3. does this work with xp too?

  4. You need to apply this policy to OU with computers. Domain controller as well as other servers should reside in another OU

  5. Did this work for anyone? It's not working for me

  6. hi..Im student from Informatics engineering, this article is very informative, thanks for sharing :)

  7. For setting a password to the local administrator account of a XP/2000/NT4 machine a startup script run by a GPO can be used instead. The script should just consist of the line "net user Administrator %1" and the password entered as a variable inside the GPO.


  8. Funciona no windows 8? fiz um teste com duas VM, e so funcionou no win7 =/

  9. Hello All,

    I came across your post which by the way was very useful, I was able to enable the account but could not set a password to it, the pw fild(s) is(are) grayed-out... any thoughts?
    Your time and help is appreciated


  10. I am also having the issue Felipe Pinelli is having. Any thoughts out there?

  11. http://support.microsoft.com/kb/2962486