Is it safe to make every account an administrator?

No. Administrators have complete control of the PC, and too many of them raises security risks such as malware being installed. Microsoft advises fewer administrators and standard user accounts for day-to-day activities.

Can I make a user an administrator with PowerShell?

Yes. Add-LocalGroupMember adds users to a local group, for example Add-LocalGroupMember -Group "Administrators" -Member "Admin02". The module isn't available in 32-bit PowerShell on a 64-bit system.

What changes for the user once they are an administrator?

Members of the Administrators group approve administrative tasks with a consent prompt. Standard users get a credential prompt and must type an administrator's credentials instead.

Change a user account to administrator in Windows 11

To change a local user to an administrator in Windows 11, open Settings and select Accounts > Other users¹. Open the flyout for the account and select Change account type next to Account options¹. Pick the account type from the dropdown and select OK¹. Do this from an administrator account, because standard users must enter an administrator's credentials for such tasks².

Before you start

Giving someone administrator rights is an administrative task. Sign in with an account that is already an administrator. A standard user who starts a task that needs administrator rights must type valid administrator credentials².

Think before you add an administrator. Administrators can change settings, install software and access all files¹. Microsoft advises keeping the number of administrators low and using standard user accounts for day-to-day activities¹.

The account you want to change must already exist on the PC. If it doesn't, add it first (see Common problems)¹.

Steps

Open Other users. In the Settings app, select Accounts > Other users¹.
Open the account. Under Other users, select the flyout for the account you want to change¹.
Select Change account type. Next to Account options, select Change account type¹.
Pick the administrator type. From the dropdown, select the administrator account type¹.
Save the change. Select OK¹.

Check it worked

Go back to Settings > Accounts > Other users and open the same account¹. Select Change account type again and check which type the dropdown shows¹. Select OK or close the window without changing it.

The user now gets a consent prompt for administrative tasks, as members of the Administrators group do². A standard user sees a credential prompt instead².

Common problems

Windows asks for an administrator password. You are signed in as a standard user. Standard users must type valid credentials for a local administrator account to finish an administrative task².
The person has no account on the PC yet. In Settings > Accounts > Other users, under Add other user, select Add account¹. For a local account, select I don't have this person's sign-in information, then Add a user without a Microsoft account¹. Microsoft recommends a Microsoft account over a local account¹.
You want to undo the change. Repeat the steps and choose the standard user type from the dropdown¹. Standard user accounts are the safer choice for daily use¹.
You prefer PowerShell. Add-LocalGroupMember adds members to a local group such as Administrators³. Members of that group have Full Control permissions on the PC³. The module isn't available in 32-bit PowerShell on a 64-bit system³. Replace Admin02 with the account name.
PowerShell
```
Add-LocalGroupMember -Group "Administrators" -Member "Admin02"
```

Questions

Is it safe to make every account an administrator?: No. Administrators have complete control of the PC, and too many of them raises security risks such as malware being installed¹. Microsoft advises fewer administrators and standard user accounts for day-to-day activities¹.
Can I make a user an administrator with PowerShell?: Yes. Add-LocalGroupMember adds users to a local group, for example Add-LocalGroupMember -Group "Administrators" -Member "Admin02"³. The module isn't available in 32-bit PowerShell on a 64-bit system³.
What changes for the user once they are an administrator?: Members of the Administrators group approve administrative tasks with a consent prompt². Standard users get a credential prompt and must type an administrator's credentials instead².

18 Sept 2026: Published.