How to Change the Admin Account on Windows 11

Managing administrator accounts on Windows 11 is one of those tasks that sounds intimidating but is genuinely straightforward once you understand what's happening under the hood. Whether you're handing a PC over to someone else, locking down a shared family computer, or fixing a permissions problem, knowing how to change admin settings gives you real control over who can do what on the machine.

What "Admin" Actually Means in Windows 11

Windows 11 uses a tiered account permission system. Every user account on a PC falls into one of two main categories:

• Administrator – Full control. Can install software, change system settings, add or remove other accounts, and override security prompts.
• Standard User – Restricted access. Can use apps and change personal settings, but can't make system-wide changes without an admin approving them first.

When Windows 11 prompts you with a UAC (User Account Control) dialog — that pop-up asking "Do you want to allow this app to make changes?" — it's the permission system doing its job. Admins can approve those prompts directly. Standard users need an admin's credentials to proceed.

There's also a hidden built-in Administrator account that exists on every Windows installation. It's disabled by default and separate from the admin accounts you create during setup. Most users never need to touch it.

The Main Ways to Change Admin on Windows 11

"Changing admin" can mean a few different things depending on your situation:

• Promoting a standard account to administrator
• Demoting an admin account to standard user
• Transferring "primary admin" responsibilities to a different account
• Renaming the admin account

Each of these uses slightly different tools within Windows 11.

Method 1: Settings App (Easiest for Most Users)

This is the most accessible route for everyday users.

1. Open Settings (Win + I)
2. Go to Accounts → Family & other users
3. Under Other users, click the account you want to change
4. Click Change account type
5. Use the dropdown to select Administrator or Standard User
6. Click OK

⚠️ You must already be signed in as an administrator to do this. If you're changing your own account, you'll need at least one other admin account active on the machine — Windows 11 won't let you demote yourself if you're the only admin.

Method 2: Control Panel

The classic Control Panel route still works in Windows 11 and some users find it more intuitive for account management.

1. Open Control Panel → User Accounts → Manage another account
2. Select the target account
3. Click Change the account type
4. Choose Administrator or Standard
5. Click Change Account Type

Method 3: Computer Management (For More Control)

Power users often prefer this method because it gives more detail about group memberships.

1. Right-click the Start button → Computer Management
2. Navigate to Local Users and Groups → Users
3. Right-click the account → Properties
4. Go to the Member Of tab
5. Add or remove the account from the Administrators group

This method is only available on Windows 11 Pro, Education, and Enterprise editions. Windows 11 Home does not include Local Users and Groups in Computer Management.

Method 4: Command Prompt or PowerShell

For those comfortable with the command line, you can change account types quickly:

To add an account to the Administrators group:

net localgroup administrators "AccountName" /add 

To remove an account from the Administrators group:

net localgroup administrators "AccountName" /delete 

Run these commands in an elevated (Run as administrator) Command Prompt or PowerShell window. Replace AccountName with the exact username.

Comparing the Methods 🔍

Special Cases That Change the Equation

Microsoft Accounts vs. Local Accounts

If the PC uses a Microsoft account (signed in with an email address), the account type change still happens locally through Windows — but the account itself is tied to Microsoft's ecosystem. Switching that account's admin status works the same way, but parental controls and Microsoft Family features can add an extra layer of restrictions on top of standard Windows permissions.

Local accounts are simpler in this regard — no cloud layer, what you set is what you get.

When You're Locked Out

If you've lost access to all administrator accounts on the machine, recovery becomes more complex. Options include booting from a Windows 11 installation USB and using recovery tools, or enabling the hidden built-in Administrator account through Safe Mode with Command Prompt using net user administrator /active:yes. This is a legitimate recovery path, but it requires physical access to the machine and some comfort with command-line tools.

Domain-Joined PCs

If the computer is joined to a work or school domain, local account management may be partially or fully controlled by your organization's IT department through Group Policy. Changes you make locally might be overridden at the next policy refresh. In those environments, account changes often need to happen at the domain level, not just on the device itself.

Factors That Affect Which Method Works for You

The right approach depends on variables that are specific to your setup:

• Which edition of Windows 11 you're running (Home vs. Pro changes your available tools)
• Whether you're using a Microsoft account or a local account
• Whether the machine is domain-joined or personal
• Whether you currently have admin access or are trying to recover it
• Your comfort level with command-line tools vs. graphical interfaces

A shared home PC, a work laptop, and a solo personal machine all have meaningfully different admin management needs — and the same steps can have different outcomes depending on how the system is configured.