How to Get Permission from an Administrator in Windows 11

To get permission from an administrator in Windows 11, start the task you want to do and let the PC’s administrator type their account password into the User Account Control prompt that appears. That approves that one action only. If you need administrator access regularly and the owner agrees, an administrator can open Settings > Accounts > Other users, select your account, choose Change account type, pick Administrator, and select OK. On a work or school PC, ask your IT department instead.

Applies to: Windows 11, including version 26H2, on personal and family PCs. Work and school PCs follow their organization’s rules.

Which permission message are you seeing?

“You need administrator permission” covers two different situations in Windows 11, and the fix depends on which one you have.

• A User Account Control (UAC) prompt. The screen dims and a box asks you to approve changes. This appears when an app or setting needs administrator rights for the whole PC, such as installing software.
• A file or folder message. File Explorer says something like “You need permission to perform this action” or “Access denied” when you try to open, change, move or delete a particular item. This is about who owns that item and who has permission on it, and it can happen even on an administrator account.

Use this table to jump to the right route. Picking the narrowest one keeps your account from getting more power than it needs.

Your situation	Best route
You need to install one app or change one setting, and someone else is the administrator	Get one-time approval on the UAC prompt
You use the PC every day, regularly need administrator access, and the owner agrees	Have an administrator change your account type
Your account is already an administrator, but a tool says it needs elevation	Run the app as administrator
“You need permission to perform this action” on a specific file or folder	Fix access to a file or folder
Windows Security says it blocked an app from changing a folder	Allow the app through controlled folder access
The PC belongs to your employer or school	Contact your IT department; its rules decide what you can change

How administrator permission works in Windows 11

Windows 11 has two main account types. A standard user can use apps and change personal settings. An administrator has full control over the system, which is why Microsoft recommends keeping the number of administrators small and using standard accounts for day-to-day work. Not sure which kind you have? Here’s how to see if you have admin rights on Windows 11 before you ask anyone for help.

User Account Control sits between both account types and system-wide changes. Even an administrator normally runs apps with standard rights (Microsoft calls this Admin Approval Mode) and only gets full rights after approving a prompt. The prompt you see tells you which account type you’re using:

• Consent prompt: an administrator sees Yes and No buttons and simply confirms the change.
• Credential prompt: a standard user sees boxes for an administrator’s sign-in details. Without them, the action doesn’t run.

Both prompts appear on the secure desktop: the rest of the screen dims and only the prompt can be used until someone answers it. A gray prompt means the app is part of Windows or signed by a verified publisher. A yellow prompt means the app is unsigned, or signed but not trusted, so look more closely before approving it. Microsoft explains these prompts in How User Account Control works.

Get one-time approval from the administrator

This is the quickest and safest route on a shared or family PC. The administrator approves one specific action, and your account keeps its normal rights.

1. Start the task that needs permission, for example by opening an app’s installer or the setting you want to change. Windows dims the screen and shows the User Account Control prompt asking for an administrator’s sign-in details.
2. Read the prompt. It names the app that wants to make changes, and its color shows whether the publisher is verified (gray) or not (yellow). If you didn’t start this action yourself, select No.
3. Ask the administrator to come to the PC and enter their own sign-in details in the prompt. Tell them exactly what you’re installing or changing so they can decide.
4. When they select Yes, the action continues with administrator rights. Only that app or task is elevated, and your account is still a standard account afterward.
5. If they select No, nothing changes and the app that asked doesn’t get administrator rights.

The administrator should type their password into the prompt themselves rather than telling it to you. That keeps the administrator account private and lets them see each change they approve. If they can’t come to the PC, the request has to wait: the prompt can only be answered on the computer that shows it.

Ask an administrator to change your account type

If you need administrator access regularly and the owner of the PC agrees, an administrator can make your account an administrator. They have to do this from their own account, because a standard account can’t promote itself.

1. The administrator signs in to Windows 11 with their administrator account.
2. They open Settings (press Windows key + I) and select Accounts.
3. They select Other users. Your account appears in the list under Other users.
4. They select your account to expand it. Next to Account options, they select Change account type.
5. In the Account type dropdown they pick Administrator, then select OK.

6. Sign out and back in to your own account so Windows and your apps pick up the new account type. The next time something needs permission, you’ll see a Yes/No consent prompt instead of a request for someone else’s password.

These steps match Microsoft’s Create a local user or administrator account in Windows. Administrators who prefer Control Panel or a command can find those routes in giving a user admin rights in Windows 11, and deciding which account should hold the main administrator role is covered in changing the administrator account in Windows 11.

Undo the change later

Administrator rights don’t have to be permanent. When the task is done, an administrator repeats the same steps and picks Standard User in the dropdown. Keep at least one administrator account that someone can still sign in to, and don’t remove the rights from the only administrator on the PC.

If your account is already an administrator

An administrator account still runs apps with standard rights until you approve a prompt. Some tools, such as Command Prompt, PowerShell and Windows Terminal, only get full rights when you start them elevated.

1. Find the app on the Start menu or taskbar, or search for it.
2. Right-click the app and select Run as administrator.
3. Select Yes on the User Account Control prompt. The app opens with administrator rights.

More ways to do this, including for games and shortcuts, are in running an app as administrator in Windows 11.

On Windows 11 version 24H2 or later you can also turn on Sudo for Windows: open Settings > System > Advanced and set Enable sudo to On. You then type sudo before a command to run it elevated. Sudo still elevates through User Account Control, so it doesn’t let anyone skip the prompt, and Microsoft recommends keeping the default In a new window option. There’s more on using sudo in Windows 11 if you want the details.

Fix “You need permission to perform this action” on a file or folder

A permission error on one item isn’t always about your account type. Before changing anything, work out which of these applies:

• The item belongs to another account. Files copied from an old PC, an external drive or another person’s profile can still be owned by an account that doesn’t exist on this PC.
• It’s a protected Windows folder. Folders such as C:\Windows and C:\Program Files are meant to need administrator approval for changes. Approving the UAC prompt is the right fix; changing their owner isn’t.
• It’s open somewhere else. If a file is open in an app, Windows may refuse to move, rename or delete it. Close the app (or restart the PC) and try again.
• Controlled folder access is blocking an app. This Windows Security feature stops unknown apps from changing files in protected folders such as Documents. See the section below.
• It’s on a network share or a work device. Permissions there are set by whoever manages the share or device, so ask them.

Take ownership of a file or folder that is yours

If you’re an administrator and the item really is yours, for example a folder of photos copied from your old computer, you can make your account its owner. Microsoft notes that an administrator can take ownership of any file on the computer, which is exactly why you should limit this to the one item giving the error.

Warning: Don’t take ownership of the Windows drive, the Windows or Program Files folders, or another person’s user profile folder. Changing ownership across those folders can weaken security and stop apps and Windows updates from working.

1. In File Explorer, right-click the file or folder and select Properties.
2. Select the Security tab, then select Advanced. The Advanced Security Settings window opens and shows the current owner.
3. Select Change next to the owner’s name and approve the UAC prompt if one appears.
4. In the box labeled Enter the object name to select, type your Windows user name, select Check Names so Windows underlines it, and select OK.
5. For a folder, decide whether to check Replace owner on subcontainers and objects. Checking it also makes you the owner of everything inside the folder, which is usually what you want for your own copied files.
6. Select OK (and Yes if Windows asks to confirm), then close and reopen the Properties window.
7. Back on the Security tab, check that your account has the permissions you need. If it doesn’t, select Edit, select your account (or add it), and tick Full control under Allow.

The same steps, with more on the permission checkboxes, are in changing file permissions in Windows 11.

If you prefer a command, open Windows Terminal with Run as administrator, type takeown /f followed by a space and the full path of the file in quotation marks, and press Enter. Windows makes the signed-in user the owner. The /r option repeats this for everything inside a folder, so use it only on your own folder, never on a drive or system folder. All the options are on Microsoft’s takeown reference page.

Allow a trusted app through controlled folder access

When controlled folder access blocks an app, Windows Security shows a notification that the app was blocked from making changes. The app may then report a permission error even on an administrator account. If you trust the app:

1. Open the Windows Security app and select Virus & threat protection.
2. Select Manage ransomware protection. The Ransomware protection page opens.
3. Select Allow an app through Controlled folder access and select Yes on the User Account Control prompt.
4. Select Add an allowed app, then pick the app from the recently blocked list or browse to its program file.
5. Try the save or change again. It should now go through without the block notification.

Only add apps you recognize. Controlled folder access exists to stop ransomware from encrypting your files, so turning it off entirely isn’t a good fix. Microsoft covers this page in Virus and threat protection in the Windows Security app.

Troubleshooting

Change account type is missing or grayed out

You’re probably signed in with a standard account, or you’re looking at your own account (it appears under Your info, not Other users). Only an administrator can change account types, and they make the change from their own account. If the PC is managed by an organization, its policies may hide or block these settings entirely.

The prompt keeps asking for a password

That’s the credential prompt, which means the account you’re using is a standard user. Either have an administrator approve each action, or ask them to change your account type as described above. If your account was just changed to Administrator, sign out and sign back in.

Nobody remembers the administrator password

If the administrator account is your own, reset its password from the sign-in screen. For a Microsoft account, select I forgot my password. For a local account, select the arrow next to the password box, select OK, then Reset password, and answer your security questions. Both routes are in Microsoft’s Change or reset your Windows password, which also notes that Microsoft support can’t retrieve or get around a lost password. For more on tracking down who holds the password, see finding the administrator password in Windows 11.

Work or school computer

Company and school PCs are usually managed centrally, and the organization controls who gets administrator access. Don’t try to work around those restrictions: changes you make may be reversed, and they can break your organization’s rules. Contact your IT department or help desk, say which app or setting you need, and they can install it for you or approve the access.

Advice to enable the hidden Administrator account or turn off UAC

You’ll find instructions online for switching on Windows’ built-in Administrator account, starting in Safe Mode, or setting User Account Control to never notify. Skip them. The built-in account runs everything with full rights and no prompts, and lowering UAC removes the check that stops programs from making changes silently. On a PC you don’t own, these routes also go around the owner’s decision. Approving the specific action you need is the safer route.

Still stuck on a particular error? Fixing administrator permission errors in Windows 11 walks through more of them.

How to confirm it worked

• Account type: open Settings > Accounts > Your info. Your account type should read Administrator.
• Prompt type: the next UAC prompt shows Yes and No instead of asking for a password.
• File access: the file or folder opens, saves or deletes without the “You need permission” message.

Frequently asked questions

Can I give myself administrator rights without an administrator?

No. A standard account can’t raise its own rights; an existing administrator has to approve each action or change your account type. If you own the PC and lost access to its administrator account, recover that account’s password with Microsoft’s supported reset options.

Why does Windows ask for permission when I’m already an administrator?

Administrators run apps with standard rights by default. The Yes/No prompt is Windows checking that you meant to make a system-wide change, which stops programs from making those changes without you noticing.

Is it safe to use an administrator account every day?

It’s safer not to. Microsoft recommends standard accounts for day-to-day activities and keeping administrators to a minimum. Many people keep one administrator account for maintenance and do everything else from a standard account.

Can I install software without asking the administrator?

Sometimes, depending on how the app installs, but anything that makes changes for the whole PC brings up the UAC prompt and still needs approval. A few options are listed in installing software without admin rights on Windows 11.

Can administrators see the files in my account?

Yes. Because an administrator can take ownership of any file on the PC, someone with that role can reach files in other accounts. Only give administrator rights to people you trust with everything on the computer.

What does a yellow permission prompt mean?

A yellow background means the app is unsigned, or signed but not trusted. That doesn’t always mean it’s harmful, but check that you downloaded it from the publisher’s official site before you approve it.

Once you have the approval or rights you need, go back to the app or setting that started all this and finish the task. If an administrator changed your account type just for this job, ask them to switch it back to Standard User afterward.