How to Give a User Admin Rights in Windows 11

To give a user admin rights in Windows 11, sign in with an administrator account, open Settings > Accounts > Other users, select the person’s account, choose Change account type, pick Administrator and select OK. The change takes effect the next time they sign in. You can also do it from Control Panel, the netplwiz tool or a single command, all covered below.

Applies to: Windows 11 Home and Pro, for local accounts and Microsoft accounts on the same PC. On a work or school PC, only your IT department can change this. Last reviewed October 7, 2026.

Before you start

• You must already be an administrator. Check in Settings > Accounts > Your info; the word Administrator appears under your name. A standard user can’t give themselves admin rights.
• The account must already exist on the PC. If it doesn’t, add it first in Settings > Accounts > Other users > Add account.
• Only give admin rights to people you trust. An administrator can install software, change security settings, and see or delete other users’ files.

Method 1: Use Settings

1. Press Windows key + I to open Settings.
2. Select Accounts > Other users. On some versions this is called Family & other users.
3. Select the account you want to change. People in your Microsoft family group appear under Accounts > Family instead.
4. Select Change account type.
5. Under Account type, choose Administrator and select OK.

The account now shows Administrator under its name. If the person is signed in, they need to sign out and back in for the change to apply.

Method 2: Use Control Panel

1. Open Start, type Control Panel and open it.
2. Under User Accounts, select Change account type.
3. Select the account.
4. Select Change the account type, choose Administrator and select Change Account Type.

Method 3: Use netplwiz

1. Press Windows key + R, type netplwiz and press Enter.
2. Select the account in the list and select Properties.
3. Open the Group Membership tab.
4. Choose Administrator and select OK twice.

Method 4: Use a command

This is the quickest way if you’re comfortable typing commands, or if you’re setting up several PCs.

1. Right-click Start and select Terminal (Admin). Select Yes when asked.
2. To see the exact account names on the PC, run net user.
3. Run this command, replacing Sam with the account name:
   net localgroup Administrators "Sam" /add
4. You should see The command completed successfully.

For an account that signs in with a Microsoft account, use its email address with a prefix, for example net localgroup Administrators "MicrosoftAccount\[email protected]" /add.

In PowerShell, the equivalent is Add-LocalGroupMember -Group "Administrators" -Member "Sam".

Method 5: Use Computer Management (Windows 11 Pro)

1. Right-click Start and select Computer Management.
2. Go to Local Users and Groups > Groups and double-click Administrators.
3. Select Add, type the account name, select Check Names and then OK twice.

Local Users and Groups isn’t available in Windows 11 Home. Use one of the other methods there.

Remove admin rights

Follow Method 1 or 2 and choose Standard User instead, or run net localgroup Administrators "Sam" /delete. Make sure at least one other account is an administrator before you change your own, or nobody will be able to change admin settings on the PC.

Do they need full admin rights?

Many people only need admin rights for one task. Consider these alternatives:

• Approve one task: when a standard user does something that needs admin rights, Windows asks for an administrator’s password. You can type it for them without changing their account.
• Access to a folder: give them permission to a specific folder instead. See how to change file permissions in Windows 11.
• Run one command as admin: administrators can use sudo in Windows 11 to run a single command with full rights.

Troubleshooting

“Change account type” is missing or greyed out

You’re signed in as a standard user, or you selected your own account while you’re the only administrator. Sign in with an administrator account. On a PC managed by work or school, the setting is locked.

“System error 1378” when running the command

The account is already an administrator. Nothing else needs to be done.

“The user name could not be found”

Check the spelling with net user. Use quotation marks if the name has spaces, and add the MicrosoftAccount\ prefix for Microsoft accounts.

The person still can’t install apps

They need to sign out and back in. Also check Settings > Apps > Advanced app settings: if Choose where to get apps is set to The Microsoft Store only, Windows blocks other installers for everyone.

Frequently asked questions

Should I turn on the built-in Administrator account?

No. It’s hidden for a reason and has no protection from User Account Control prompts. Making a normal account an administrator is safer.

Can a child account be an administrator?

Child accounts in a Microsoft family group are meant to stay standard users so parental controls keep working. Leave them as standard.

How many administrators can a PC have?

There’s no limit, but it’s safest to keep only the accounts that need it.

Related: How to fix administrator permission errors in Windows 11.