A built-in Administrator account is a user account that is by default added to Administrators group. In pre-Windows Vista operating systems, the built-in Administrator accounts were enabled and the operating systems allowed users to log on to them by providing their passwords. Since the account named Administrator is by default added to the Administrators group, it has unrestricted privileges on the entire operating system.
To make the operating systems secured, Microsoft started disabling the built-in Administrator accounts in Windows Vista and above operating systems as their default configurations. Also, User Account Control is disabled for the built-in Administrator accounts by default. Although these operating systems allow users to create a new user account during the installation, which belongs to Administrators group, User Account Control becomes applicable on these manually created accounts. On the other hand, built-in Administrator accounts in Windows Vista and Windows 7 operating systems still have unrestricted privileges and User Account Control restrictions does not apply on them. However if administrators want, they can configure the built-in Administrator accounts in order to make User Account Control applicable on them as well.
When Enabling Built-In Administrator Account Is Important
In Microsoft Windows Vista and Windows 7 operating systems, it is strongly recommended that the built-in Administrator accounts must not be enabled whatsoever. The reason behind this is that these accounts have unrestricted privileges on the operating systems, and even User Account Control is not applicable on them. This makes the entire operating system highly vulnerable to the risks in case the built-in Administrator account is used to log on to the computers.
Built-in Administrator accounts, in Microsoft Windows Vista and Windows 7 operating systems, must only be enabled if administrators of the computers feel that they need to perform an administrative task that requires no User Account Control obstructions. Although this goal can be achieved by right-clicking the executable file of the application and selecting ‘Run as administrator’ option from the context menu.
All in all, the built-in Administrator account must not the enabled under any circumstances.
Enabling Built-In Administrator Account
As mentioned above, the built-in Administrator account must not be enabled under any circumstances, however if administrators want to enable the account for testing purposes or in lab environments, they must follow the steps given below to do so:
- Log on to Windows 7 computer with administrator account (manually created administrator account).
- Click Start, and from the menu right-click Computer.
- From the context menu click Manage, and on the Computer Management snap-in, from the left pane under System Tools category, expand Local Users and Groups.
- From the expanded list, click to select Users container, and from the right pane right-click Administrator account.
- From the context menu, click Properties.
- On the displayed Administrator Properties box, make sure that General tab is selected and uncheck Account is disabled checkbox.
- Once done, click OK button to enable the built-in Administrator account.
Click here for the Video Tutorial of how to Enable Built-in Administrator Account.