Since the last month, I have came around many users who have lost administrator rights on their Windows 8 PCs and thus they were not able to manipulate their system or make changes to it. One common thing I found regarding the issue is that the users who have lost their administrator rights, have only a single account on their system, which was of course the administrator account. As a result of losing the admin rights, you may have issues in using Windows Apps, making new or modifying Windows configuration settings in Control Panel, using Snap-ins and several other problems on your system.
It thus becomes imperative for us to get the administrator privileges back anyhow if we want to run the system without road-blocks. But how do you get back these privileges since for every operation you have to carry out, requires the administrative rights itself, which we have lost unfortunately. While performing a Refresh or Reset will fix the problem, you may want to try out our suggestion first and see if it helps you.
Lost Administrator Rights
1. Press WinKey + Q, type user accounts and click on the result.
Then select your User Account > Click Manage another account.
In the following window, click Add a user account option.
2. Now we have to create a local account user. So after clicking Add an account, click Sign in without a Microsoft account (Not recommended), then click Local account. Fill the details on the screen so appeared for adding local account. Click Finish when done.
3. Press Windows Key + Q and type cmd, for the search results, click Command Prompt. Type following command and hit Enter key:
shutdown /r /o
4. The previous step will result your system to boot into Safe Mode. After getting into Safe Mode, press Windows Key + Q, type user accounts, and pick the same from results so appear. You would have now two accounts on your system; first your issued admin account and second the local account which you’ve created in step 2. Select local account.
Now click Change the account type link in following window:
Moving on, change the account status from Standard to Administrator. Click Change Account Type.
In this way, the new local account we’ve created has been changed to Administrator. Now you can restart you machine and log into this account with administrator rights. Since you have administrative privileges now; so you can backup your documents from the old administrator account.
Finally, delete the old admin account and switch to Microsoft account to synchronize your settings with new administrative account. Your system will now act normally with full admin rights in your hand.
Post updated on: 2nd July 2014.
Additional thoughts by Anand Khanse, MVP, Admin:
- Run your antivirus software first. Malware is known to sometimes block admin privileges.
- Try using Clean Boot. If this makes the problem go away, see if you can identify the culprit.
- If it does not help, you could boot into Recovery using Windows DVD or the Recovery partition and run System Restore to restore your computer to a prior point.
- In case of domain computers, check with your system administrator, if has applied any new restrictions.
- This policy setting can be used by Domain Administrators to ensure that only select authorized users are allowed to become members of groups like say the Administrators group : Computer Configuration/Windows Settings/Security Settings/Restricted Groups
- See if you are able to activate the hidden super administrator account. Just in case you are able to, great – it will help you move forward. This is pretty useful if you find that you have locked yourself out your main account by accident and you want a back door entry.
Vasudev G, MVP, adds:
You can also try to use the iCacls command and see if it helps. This command line utility that can be used to modify security descriptors and NTFS file system permissions.
Press Shift key and the Power button to restart your Windows PC. You will boot Advanced Menu options. Here click > Troubleshooting > Command prompt. In the CMD windw whih opens, type the following command to reset permissions.
cd /d c:\ icacls * /T /Q /C /RESET
If nothing helps, then you may want to consider a System Restore or Refresh or Reset option.
Hope something helps you.