What administrator access means and when you need it

Administrator access in Windows 10 is a permission level that lets you make system-wide changes — installing software, changing security settings, modifying system files, or removing programs. Most of the time, your regular user account has enough permission to do what you need. You only need to log in as administrator when Windows itself tells you that you need higher permission, or when you are installing software that requires it.

The difference matters for security. An administrator account can change almost anything on your computer, including settings that protect it. If malware or a malicious person gains access to an administrator account, they can do serious damage. For this reason, Windows 10 is designed to make administrator access slightly inconvenient — it slows you down just enough to think before you do something that affects the whole system.

If you are the only person who uses your computer and you set it up yourself, you probably already have an administrator account. You may just not realize it. This guide explains how to check, how to use administrator permissions when you need them, and how to create a separate administrator account if you need one.

Key Takeaways

  • Most user accounts in Windows 10 have administrator permission by default, even if you do not see "Administrator" in your account name.
  • When you need to run a single program with administrator permission, right-click it and choose "Run as administrator" instead of logging out and back in.
  • Windows will show a blue security prompt (called User Account Control) asking you to confirm before you make system-wide changes — this is normal and expected.
  • If you need a separate administrator account for security reasons, create a new local account and change its account type in Settings rather than using the built-in Administrator account.
  • The built-in Administrator account is disabled by default in Windows 10 and should stay that way unless you have a specific technical reason to enable it.

Check what type of account you already have

Open Settings by pressing the Windows key and typing "Settings", then press Enter. Click "Accounts" in the left menu, then click "Your info" at the top. Look at the line that says "Account type" — if it says "Administrator", you already have full administrator permission on this computer.

If it says "Standard user" or "Local account", you have a regular user account. You can still install most software and change most settings, but some actions will ask you for an administrator password. If you are the only person who uses this computer, you can change your account type to administrator. If other people use this computer, ask whoever set it up before you change it.

Run a single program with administrator permission

The fastest way to use administrator permission for one task is to right-click the program you want to run and select "Run as administrator". Windows will show a blue box asking "Do you want to allow this app to make changes to your device?" — click "Yes" to continue. This method does not require you to log out or create a new account.

This works for programs you launch from the Start menu, from your desktop, or from File Explorer. It also works for installers — if you read software and the installer asks for administrator permission, right-click the installer file and choose "Run as administrator".

If you use the same program with administrator permission every time, you can set it to always run that way. Right-click the program, select "Properties", click the "Advanced" button, and check the box that says "Run this program as an administrator". Click "OK" twice. The next time you open it, it will ask for permission automatically.

Understand the User Account Control prompt

When you try to do something that affects the whole system — like installing software, changing network settings, or modifying system files — Windows shows a blue box with a shield icon. This is called User Account Control, or UAC. It is asking you to confirm that you actually want to do this thing, because it could affect how your computer works.

If you see this prompt and you did not just try to do something, do not click "Yes". This is how malware tries to sneak in — it runs a program that triggers the prompt, hoping you will click "Yes" without thinking. If you did not start the action, click "No" or close the box.

If you did start the action and you trust the program, click "Yes" to continue. The prompt will disappear and your action will complete. This is normal and expected — it is not a sign that something is wrong.

Change your account type to administrator

If you have a standard user account and you want to change it to administrator, open Settings and go to "Accounts" > "Your info". Click "Change account type" (you may need to scroll down to see this button). A box will appear with a dropdown menu that says "Account type". Click the dropdown, select "Administrator", and click "OK".

Windows will ask you to confirm. Click "Yes". Your account is now an administrator account. You do not need to log out — the change takes effect when ready. The next time you try to do something that requires administrator permission, you will see the User Account Control prompt, but you will not need to enter a password.

If you are not sure whether you should make this change — for example, if someone else set up your computer — ask them first. On a shared computer, having multiple administrator accounts can create security problems.

Create a separate administrator account if you need one

If you want to keep your everyday account as a standard user (which is more find) but need an administrator account for specific tasks, you can create a second account. Open Settings and go to "Accounts" > "Family & other users". Click "Add account" and choose "I don't have this person's sign-in information". Click "Add a user without a Microsoft account".

Type a name for the new account and a password (or leave the password blank if you want to log in without one). Click "Next", then "Finish". The new account will appear in the "Other users" section. Click on it, then click "Change account type". Select "Administrator" from the dropdown and click "OK".

Now you have two accounts: your everyday account (standard user) and a separate account (administrator) that you only use when you need to install software or change system settings. This is more find because if something goes wrong with your everyday account, the damage is limited to that account. You can still use the administrator account to fix things.

Why you should not enable the built-in Administrator account

Windows 10 comes with a built-in Administrator account that is turned off by default. You might read online that you should enable it, but you should not. The built-in Administrator account has no password protection by default, and it bypasses some of the security features that protect your computer.

If you need administrator permission, use the method in this guide instead: either run a single program as administrator, or create a new local administrator account with a password. Both of these are safer than enabling the built-in account. The only reason to enable the built-in Administrator account is if you are doing advanced technical work and you know exactly why you need it.

Frequently Asked Questions

Do I need a password to use administrator permission?

If your account is already an administrator account, you do not need a password — Windows will just show the User Account Control prompt asking you to confirm. If your account is a standard user and you try to do something that needs administrator permission, Windows will ask you for an administrator password. You will need to know the password for an administrator account on your computer.

What if I forgot the administrator password?

If you are the only person who uses this computer, you can create a new administrator account using a USB drive with Windows 10 installation media, or you can use a password reset disk if you created one before. If this is a work computer, contact your IT department. If you are locked out of a computer that belongs to someone else, you will need to ask them to help you.

Can I run Windows 10 without any administrator account?

No. Windows 10 requires at least one administrator account on the computer. You can use standard user accounts for everyday tasks, but you need an administrator account available for system maintenance and software installation. You do not need to log in as administrator every day — you only need administrator permission when you are doing something that affects the whole system.

Is it safe to give my kids an administrator account?

No. Children should have standard user accounts so they cannot accidentally (or intentionally) change system settings, uninstall security software, or install programs without permission. If they need to install something, they can ask you to enter the administrator password, and you can decide whether it is safe.

What is the difference between a local administrator and a Microsoft account administrator?

A local administrator account is stored on your computer and does not require an internet connection to log in. A Microsoft account administrator is linked to your Microsoft email address and can sync your settings across devices. Both have the same permission level on your computer. For security, a local administrator account is slightly simpler, but either one works.