Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I want a full named admin account on Windows 7.

The default local administrators group is a limited account.

You can enable the hidden full administrator account, but I can't see how to rename it.

How can I get a full admin account on Windows 7 in my name.

(edit, the problem was that I couldn't write to some files on an external hard disk because of permissions)

share|improve this question
Judging from reactions to this, you might be more successful if you describe what you don't have access to that you want. Describe the problem you're having, not what you believe the solution should be. – Stephen Jennings Mar 26 '10 at 3:42
up vote 1 down vote accepted

You can rename the Administrator account in Local Security Policy. Type secpol.msc in the start menu, then navigate to:

Local Policies\Security Options\Accounts: Rename administrator account

The Administrator account is no more or less an administrator than your normal user account which is a member of Administrators. What governs your rights over the system is the local security policy (and NTFS permissions). Assuming you haven't made any changes to your local security policy, you may find a few things that Administrator is granted rights to that Administrators is not. Two particular policies you might be interested in are under Local Policies\Security Options:

User Account Control: Admin Approval Mode for the Built-in Administrator account
User Account Control: Run all administrators in Admin Approval Mode

If you disable these policies, then UAC is disabled for the Administrator account or Administrators group.

If you believe a member of Administrators is not really a full "administrator", then either you have a security policy in place causing this, or what you're looking to do is to disable UAC, which you can do either through Control Panel (easier and safer) or through Local Security Policy.

share|improve this answer
Thanks for making things clear, and solving the issue I was having (file permissions). – soupagain Mar 26 '10 at 13:24

administrator is a built in account, you cannot rename it, add yourself a user and choose group options and select member of "administrators"

share|improve this answer
NO! Doesn't work, makes you part of the local administrators group. On Windows 7, the local administrators group is a limited account. Only the "administrator" account is full. That is the problem. – soupagain Mar 25 '10 at 20:18

Sounds like an issue with UAC, not with the type of account or the tokens which can be issued to "the" administrator account versus any other member of "local admins".

If you want a user to have the priviledges associated with being an admin, then either turn off UAC (a bad idea generally) or run necessary programs using "Run as Administrator".

Local admins does not only give limited user rights, it provides a special token for members when you don't elevate your priviledges, so that any deny permissions applied anywhere to this group will still work, but you don't get the normal token to show you are a member. If you elevate, you get the admin tokens.

Use whoami /groups to see what groups you are a member of (and thereby which tokens you have been granted).

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.