Windows 11 Administrator Account Locked Out: 9 Proven Fixes

Is your Windows 11 administrator account locked out? Try these proven fixes for a quick resolution.

This can happen for various reasons, such as:

• Too many failed login attempts
• Account Lockout Policy settings
• Domain Policy settings
• Too many failed remote access attempts
• A corrupted user profile.

You’ll need trusted solutions that don’t waste your time or put your files at risk. To address this, I’ve tested different approaches to recover an admin account in Windows 11. Here are the methods that worked for me.

How To Fix Windows 11 Administrator Account Locked Out

Follow the steps in the order they appear in:

Use Microsoft Account to Reset Password

This method has a higher success rate than others. However, the only downside is you must be connected to the internet and should know the work or personal Microsoft Account credentials before attempting. Keep your account information handy and try these steps:

1. Go to the Windows 11 Sign-In screen.
2. Select the admin account you want to sign in with from the lower left corner.
3. Click on the I forgot my PIN link.

4. The Microsoft Account sign-in dialog will open.
5. Enter your password to continue.

6. On the Approve sign-in request screen, use the Microsoft Authenticator app on your phone.
7. You’ll see a warning screen explaining to you the risks involved in the process.
8. Click Continue and follow the on-screen instructions to unlock your admin account.

If you don’t wish to continue after the 8th step with resetting your PIN and syncing your Microsoft Account from scratch, there’s a workaround you can try.

Close the Are you sure? dialog box.

Windows 11 should show your user account’s avatar or initials briefly and automatically take you to the Desktop, bypassing the sign-in screen.

The above approach will only work if the underlying user account files in the Windows 11 PC aren’t corrupted.

Use Another Administrator Account

1. If another admin user can access the same PC, use that to log in.
2. Click the Start menu button and type Computer.
3. Select the Computer Management tool below the Best match section on the Start menu.
4. On the Computer Management interface, select the Local Users and Groups menu in the left-side navigation panel.
5. Double-click the Users menu on the right.
6. You should now see all the user accounts.
7. Select the one that’s locked out.
8. If you can’t log in due to a password issue, right-click and select Set Password.

9. On the warning message that pops open, click Proceed and follow on-screen instructions.
10. If the PIN isn’t the issue, right-click on the selected user account and choose Properties from the context menu.
11. Go to the General tab and uncheck the following boxes:
    • Account is disabled
    • Account is locked out
12. Click Apply and OK.

Restart the PC to log in using your own admin account.

Use a Password Reset Disk

If you’ve got a password reset disk, here’s how you can put it to use when the Windows 11 administrator account is locked out:

1. On the Windows 11 log-on screen, enter an incorrect PIN.
2. When you see the Use a password reset disk instead prompt, click on that link.
3. Insert the USB stick or CD/DVD disk you’ve got.
4. Follow the onscreen prompts on the Password Reset Wizard to create a new PIN or password.
5. Try to log back into your admin account.

If you haven’t got a Windows password reset disk, here’s how you can create one for future use:

1. Bring up the Start menu and type Control.
2. Click on the Control Panel tool below Best match.
3. Select the View by drop-down menu on the Control Panel interface and select Small icons.

4. Now, select the User Accounts link from the list of Control Panel resources.
5. Click on the Create a password reset disk on User Accounts.

6. The disk will be created for the currently logged-in account. To make a password reset disk for a different one, switch users on the PC.
7. The Forgotten Password Wizard will open. Click Next.
8. Windows will automatically select the USB stick or CD/DVD available on the PC, if any.
9. If none are there, insert any of the above alternative password reset disk media.
10. Click Next.

11. Enter the password or PIN for the logged-in user account on the next screen and hit Next.
12. Now, follow the on-screen guidance to complete the process.

Activate Built-in Admin Account Using CMD

You can use a standard or admin account to enable the factory-configured administrator account that usually isn’t visible to a basic user. Here’s how:

1. Press the Windows key and type CMD.
2. Click on the Command Prompt tool shown below Best match.
3. Copy and paste the following command inside the CMD terminal:

net user Administrator /active:yes

4. Hit Enter to execute the code.

5. If standard CMD doesn’t work, try it with admin privileges. Choose Run as administrator from the Start menu when you search for CMD.

Restart the PC. When it reaches the log-in screen, you should see a second user account as Administrator. Click on that and sign in.

Enable Hidden Administrator Account Using PowerShell

Windows PowerShell gives you more access to personalize the built-in admin account, like setting a custom password. You must first use an alternative administrator account to log in and perform these steps:

1. Press Windows + X on the keyboard to bring up the Power User context menu.
2. Click on the Terminal (Admin) option.
3. PowerShell will open with administrative privileges. Copy and paste the following script into the console:

# Run the script as Administrator

# Enable the built-in Administrator account
$adminAccount = "Administrator"
Enable-LocalUser -Name $adminAccount

# Optionally, set a password for the Administrator account
# You can set a strong password or skip this part if you want to keep it without a password.
$password = Read-Host -AsSecureString "Enter password for the Administrator account"
Set-LocalUser -Name $adminAccount -Password $password

# Optionally, ensure the account is not disabled
Set-LocalUser -Name $adminAccount -Enabled $true

Write-Host "Built-in Administrator account has been enabled."

4. You might need to click on a Paste anyway pop-up.

5. The script will run automatically and pause to ask you for the custom password.
6. Type in the one you want to set and hit Enter.
7. The script will continue to run and show the ‘Built-in Administrator account has been enabled.‘ message once done.

8. Restart the PC and sign in with the newly activated admin account.

Using the Local Security Policy Tool

The Local Security Policy interface allows Windows 11 to control account lockout duration, threshold, and the lockout counter. So, use another admin account to access the PC and make the following changes in this security tool:

1. Bring up the Run command by pressing the Windows + R keys together.
2. Type secpol.msc inside the Open field and hit Enter.

3. The Local Security Policy tool will open.
4. Double-click on the Account Policies directory in the left-side navigation panel.
5. Select the Account Lockout Policy below the Password Policy directory.

6. On the right side, a few binary files will show up. Here are the changes you need to make:
   • Account lockout duration: 00 minutes
   • Account lockout threshold: 00 invalid logon attempts
   • Allow administrator account lockout: Disabled
   • Reset account lockout counter after: Not Applicable, the features disable automatically as you edit the previous three binary files.

7. Close the Local Security Policy app.
8. Again bring up the Run command and execute the lusrmgr.msc command.

9. The Local Users and Groups dialog will open.
10. Select Users on the left and double-click your admin account on the right.
11. Make sure the Account is disabled option isn’t checked on the General tab of the User Account Properties dialog.

12. Make necessary changes if needed, click Apply, and hit OK.
13. Restart the PC and attempt to log in using your admin account again.

Use Command Prompt via Recovery Mode

When you can’t log in with any alternative admin account, you must enable the hidden admin or fix the existing one with a CMD interface in WinRE. Here’s how:

1. Press the Shift key and click on the Power button on the log-in screen.

2. Select Restart. Keep the Shift key pressed until you see the Please wait screen after the reboot.
3. When you see this screen, release the Shift key.
4. You’re now on WinRE.

5. Click on the Troubleshoot option.
6. Select Advanced options on the next screen.

7. Hit the Command Prompt button.

8. Enter the following command into the terminal:

net user adite /active:yes

9. Don’t forget to edit the username part of the command after the net user syntax.
10. Hit Enter.
11. If the account exists or the underlying user profile files are in working condition, you’ll see a positive confirmation.
12. When the account doesn’t exist or the user profile directory is corrupted, you’ll get an error message.

13. Restart the PC to log in now using your existing admin account.
14. If you’re unable to fix the existing user account, activate the hidden admin by following everything until step 8 and use the following command instead:

net user administrator /active:yes

Restart the PC and sign in using the admin profile.

Contact Microsoft Support

If none of the above worked, visit the Microsoft Windows Troubleshoot & repair portal and go to the Need more help? form.

Type in the issue and hit Enter to create a ticket and contact a chat, phone, or email support specialist.

Reset Windows 11 (Without Losing Data)

If you’ve got enough time, you can also attempt a Windows 11 PC Reset by following these instructions:

1. Follow the steps mentioned earlier to access WinRE.
2. Click Troubleshoot.
3. Hit the Reset this PC button on the next screen.

4. Choose an option that suits you:
   • Keep my files: Keeps personal files only. Windows discards apps and settings.
   • Remove everything: This option will delete everything from the installation drive.

5. The next screen is about selecting a source for the Windows 11 installation media.
6. If you’re connected to the internet, choose Cloud download.
7. If you aren’t, select Local reinstall.

8. WinRE will take a while to process background files and settings.
9. Hit the Reset button when it appears.

Summary

So, now you know what to do when your Windows 11 administrator account is locked out. Which method has worked for you? If there’s anything I missed, feel free to comment below.

You can also learn how to change the administrator account in Windows 11, force unlock Windows 11, or enable or disable super administrator.