How to Check if I Have Admin Rights on Windows 11

To check if you have admin rights on Windows 11, press Windows + I to open Settings, select Accounts, and look directly under your name at the top of the page. If it says Administrator, your account has admin rights. If there’s no Administrator label (or it says Standard User), you have a standard account and need an administrator’s help for system-wide changes.

Applies to: Windows 11 Home, Pro, Enterprise and Education, including version 26H2. The Settings path for managing account types matches Microsoft’s page on managing user accounts in Windows. Still on Windows 10? The menus differ a little, so follow the steps to check admin rights on Windows 10 instead.

Standard user or administrator: what the labels mean

Every account on a Windows 11 PC is one of two types:

• Administrator: can install software for all users, change system settings, add or remove accounts, and open any file on the PC. Windows still asks you to confirm these actions with a User Account Control (UAC) prompt.
• Standard User: can run apps, browse, and change settings that affect only their own account. When a task needs admin rights, Windows asks for an administrator’s PIN or password.

The account you created or signed in with during Windows setup is normally an administrator. Accounts added later usually start as standard users until an administrator changes them. Microsoft recommends keeping few administrators and using standard accounts for everyday work.

These labels describe rights on this one PC only. Being an administrator here says nothing about Microsoft 365 admin roles or rights on another computer you sign in to with the same Microsoft account.

Method 1: Check in Settings (quickest)

1. Press Windows + I, or open Start and select Settings.
2. Select Accounts in the left pane. Your name, picture and email appear at the top of the page.
3. Look at the line under your email address. Administrator means you have admin rights. No label, or Standard User, means a standard account.

4. If you want a second view, select Your info. The same account type shows under your name there.

Work and school PCs can be the exception. If your device is managed by an organization, admin rights may come from a work group rather than your own account, so confirm with whoami /groups (Method 5).

Method 2: See every account’s type (Other users)

This view is most useful when you’re an administrator and want to see who else is one.

1. Go to Settings > Accounts > Other users. Family members you added through Microsoft Family appear under Settings > Accounts > Family instead.
2. Each account with admin rights shows Administrator under its name. Accounts with no label are standard users.
3. Select an account to expand it. Next to Account options, the Change account type button opens a menu showing its current type.

Standard users can’t change anything here. To promote someone, follow the steps to give a user admin rights in Windows 11.

Method 3: Check in Control Panel

1. Press Windows + R, type control, and press Enter.
2. Select User Accounts. If View by is set to Category, select User Accounts a second time on the next page.
3. Read the details beside your picture. You’ll see Administrator or Standard user, along with whether it’s a local or Microsoft account.
4. To check other accounts, select Manage another account. Each one is labeled with its type. Windows may ask for admin approval to open this page.

Method 4: Use Command Prompt or Terminal

Commands are handy when Settings is restricted, or when you’re helping someone over the phone. None of these need an elevated window.

1. Right-click Start and select Terminal, or search for Command Prompt.
2. In Command Prompt, type net user %username% and press Enter. In a PowerShell tab, type net user $env:USERNAME instead. Both fill in your sign-in name automatically, which helps with Microsoft accounts whose local name is often a shortened version of the email address.
3. Find the Local Group Memberships line. *Administrators means admin rights. Only *Users means a standard account.

To check someone else, replace the variable with their user name, for example net user Jordan. To list every member of the Administrators group at once, run net localgroup administrators. PowerShell users can run Get-LocalGroupMember -Group "Administrators", which also shows whether each member is a local, Microsoft, Active Directory or Microsoft Entra account, as described in Microsoft’s Get-LocalGroupMember reference.

If net user reports that the user name can’t be found, you’re probably signed in with a work or school (domain or Entra) account, which isn’t a local account. Use whoami /groups below instead.

Method 5: Check your current session with whoami

The whoami /groups command lists the groups in your current sign-in token, so it also catches admin rights granted through a work group rather than directly.

1. Open Command Prompt or Terminal.
2. Type whoami /groups and press Enter.
3. Look for BUILTIN\Administrators (its SID is S-1-5-32-544) and read the Attributes column:
   • Group used for deny only: you’re an administrator, but this window isn’t elevated. That’s normal.
   • Enabled group: you’re an administrator and this window is running as administrator.
   • Not listed: your account isn’t in the Administrators group.

Want a plain yes or no for the window you’re in? Paste this into PowerShell: ([Security.Principal.WindowsPrincipal][Security.Principal.WindowsIdentity]::GetCurrent()).IsInRole([Security.Principal.WindowsBuiltInRole]::Administrator). It returns True only in an elevated window, so an administrator sees False in a normal one. Learn how to run as administrator in Windows 11 to open an elevated window.

Method 6: Local Users and Groups or Computer Management (Pro and above)

1. Press Windows + R, type lusrmgr.msc, and press Enter. (Or right-click Start, select Computer Management, and expand System Tools > Local Users and Groups.)
2. Open Groups and double-click Administrators.
3. The Members list shows every account and group with admin rights.

Windows 11 Home doesn’t include Local Users and Groups, so use Methods 1 to 5 on Home editions. On any edition, pressing Windows + R and running netplwiz opens a User Accounts list with a Group column showing Administrators or Users.

A quick clue: the UAC prompt

Right-click any app and select Run as administrator. According to Microsoft’s explanation of how UAC works, administrators get a consent prompt with a Yes button, while standard users get a credential prompt asking for an administrator’s PIN or password. Select No or close the prompt to cancel without changing anything. Treat this as a hint rather than proof: organizations can set administrators to see a credential prompt too, and turning UAC off hides prompts altogether.

Administrator account vs. elevated app

Being an administrator doesn’t mean every program runs with full rights. With UAC on, Windows gives an administrator two access tokens at sign-in and runs everyday apps with the standard one. The full token is used only after you approve a prompt. To see which apps are elevated right now, open Task Manager, go to Details, right-click a column heading, choose Select columns, and tick Elevated.

Some organizations also turn on Administrator protection, a newer Windows 11 feature that’s off by default on home PCs. With it, an administrator signs in with a deprivileged token, and each approved task runs through a hidden, system-generated account, usually after Windows Hello verification. Your account is still an administrator; elevation just works differently. If your work PC behaves this way, ask IT before changing any security settings.

Troubleshooting

Settings says Administrator, but I still get “You need permission”

Some files and folders belong to Windows or another user, and admin membership doesn’t override every permission. Run the app as administrator first. For more fixes, see how to fix administrator permission errors in Windows 11. Avoid changing ownership of Windows system folders.

Change account type is grayed out or missing

You’re signed in as a standard user, or the PC is managed by work or school policy. A standard user can’t promote their own account. Ask an administrator or your IT team. From a standard account, you can still get permission from an administrator in Windows 11 for a single task or ask them to change your account type.

Different methods give different answers

Settings and Control Panel show your account type, while whoami /groups shows your current session. A work PC can grant admin rights through a domain group, so trust whoami /groups for “can I do this right now,” and ask IT about anything that looks wrong.

I can’t find any administrator account

The person who set up the PC usually holds the admin account. Windows also has a built-in account named Administrator, but it’s disabled by default and isn’t the same as your own account having admin rights. Once you’re back in, you can change the administrator on Windows 11.

FAQ

Can I give myself admin rights from a standard account?

No. Only an existing administrator can change an account type, from Settings > Accounts > Other users > Change account type. The person may need to sign out and back in before the change takes effect.

Why does Windows ask me to approve things if I’m already an administrator?

That’s UAC working as designed. Apps start with standard rights, and the prompt is your chance to stop an unexpected program from making system changes.

Is a Microsoft account automatically an administrator?

Not automatically. The account type is set per PC. The same Microsoft account can be an administrator on your laptop and a standard user on a family desktop.

Do I need admin rights to install every app?

No. Many Microsoft Store apps and some desktop programs install just for your own account. It’s often possible to install software without admin rights on Windows 11, but don’t try to bypass restrictions on a work PC.

Should I use an administrator account every day?

Microsoft recommends a standard account for day-to-day activities, keeping administrator rights for the moments you need them. If malware runs under a standard account, it has far less access to the system.

Once you know you’re an administrator, the next step is usually putting those rights to work. Here’s how to log in as an administrator in Windows 11 when you need a different account.