How to disable the Local Administrator account in Windows

This step-by-step article describes how to disable the local Administrator account. This information does not apply to the Domain Administrator account in an Active Directory domain.

Important Before you disable the local Administrator account, make sure that another user (on the domain or a local user) is a member of the local Administrators group.

Requirements

To follow the steps in this article, you must be using a computer that is running Windows 2000 or Windows XP, and you must be logged on with an account that has administrator privileges.

How to Disable the Local Administrator Account on Windows XP

Note Before you disable the local Administrator account, make sure that there is at least one other local or network user who can gain access to the computer with administrator permissions. Otherwise, you will not be able to reverse this action in the future.

1. Log on as Administrator, or as a user with administrator permissions.
2. Right-click My Computer, and then click Manage.
3. In the left pane, expand the Local Users and Groups node, and then click Users.
4. In the right pane, double-click the Administrator account.
5. On the General tab, select the Account is disabled check box, and then click OK.
6. Quit the Computer Management console. The new setting take effect the next time you attempt to log on to this computer.

How to Deny Access to the Local Administrator on Windows 2000

In Windows 2000, you cannot disable built-in accounts. However, you can deny access to the local Administrator account by modifying the local security settings.

Note: Before you follow these steps, make sure that there is at least one other local or network user who can gain access to the computer with administrator permissions.

1. Log on as Administrator, or as a user with administrator permissions.
2. Clicking Start, point to Programs, point to Administrative Tools, and then click Local Security Policy.
3. In the left pane, expand the Local Policies node, and then click User Rights Assignment.
4. In the right pane, double-click Deny access to this computer from the network.
5. In Local Security Policy Setting, click Add.
6. In the Users and Groups box, click the Administrator account, and then click Add.
7. Click OK, click OK, and then quit the Local Security Settings console. You must restart your computer for the new security setting to take effect.