Select the product you need help with

How to disable the Local Administrator account in Windows

Article ID: 281140 - View products that this article applies to.

This article was previously published under Q281140

SUMMARY

This step-by-step article describes how to disable the local Administrator account. This information does not apply to the Domain Administrator account in an Active Directory domain.

Important Before you disable the local Administrator account, make sure that another user (on the domain or a local user) is a member of the local Administrators group.

Requirements

To follow the steps in this article, you must be using a computer that is running Windows 2000 or Windows XP, and you must be logged on with an account that has administrator privileges.

To have us disable the local Administrator account for you, go to the "Fix it for me" section. If you prefer to fix this problem yourself, go to the "Let me fix it myself" section.

Fix it for me

To fix this problem automatically, click the Fix it button or link. Click Run in the File Download dialog box, and follow the steps in the Fix it wizard.

Fix this problem
Microsoft Fix it 50519

Notes

The automatic fix intends to disable the Administrator account. If the Administrator account does not exist, the automatic fix does not work.
This wizard may be in English only. However, the automatic fix also works for other language versions of Windows.
If you are not using the computer that has the problem, save the Fix it solution to a flash drive or a CD and then run it on the computer that has the problem.

Then, go to the "Did this fix the problem?" section.

Let me fix it myself

How to Disable the Local Administrator Account on Windows XP

Note Before you disable the local Administrator account, make sure that there is at least one other local or network user who can gain access to the computer with administrator permissions. Otherwise, you will not be able to reverse this action in the future.

Log on as Administrator, or as a user with administrator permissions.
Right-click My Computer, and then click Manage.
In the left pane, expand the Local Users and Groups node, and then click Users.
In the right pane, double-click the Administrator account.
On the General tab, select the Account is disabled check box, and then click OK.
Quit the Computer Management console. The new setting takes effect the next time you attempt to log on to this computer.

How to Deny Access to the Local Administrator on Windows 2000

In Windows 2000, you cannot disable built-in accounts. However, you can deny access to the local Administrator account by modifying the local security settings.

Note: Before you follow these steps, make sure that there is at least one other local or network user who can gain access to the computer with administrator permissions.

Log on as Administrator, or as a user with administrator permissions.
Clicking Start, point to Programs, point to Administrative Tools, and then click Local Security Policy.
In the left pane, expand the Local Policies node, and then click User Rights Assignment.
In the right pane, double-click Deny access to this computer from the network.
In Local Security Policy Setting, click Add.
In the Users and Groups box, click the Administrator account, and then click Add.
Click OK, click OK, and then quit the Local Security Settings console. You must restart your computer for the new security setting to take effect.

Did this fix the problem?

Check whether the problem is fixed. If the problem is fixed, you are finished with this section. If the problem is not fixed, you can contact support
(http://support.microsoft.com/contactus)
.
We would appreciate your feedback. To provide feedback or to report any issues with this solution, please leave a comment on the "Fix it for me
(http://blogs.technet.com/fixit4me/)
" blog or send us an email
(mailto:fixit4me@microsoft.com?Subject=KB)
.