Unlock computer

Hi Jeremie, the situation you describe is unfortunately not something you can resolve by simply re‑enabling administrator rights yourself. When a company decommissions a machine, they typically remove or disable local administrator accounts and may enforce restrictions through Group Policy or Azure AD/Intune enrollment. Without valid admin credentials, Windows will not allow you to elevate privileges or install software. Attempting to bypass this would not only be unsupported but could also corrupt the system or violate licensing agreements.

The only legitimate path forward is to perform a clean installation of Windows using official Microsoft installation media. This will wipe the existing configuration, remove any corporate policies, and allow you to create a new local administrator account during setup. Before doing this, make sure you have backed up any personal files you need, because the reinstall will erase everything currently on the device. If the machine is still tied to the company’s domain or MDM, you may need them to release it before reinstalling.

If you want to proceed, download the Windows 10/11 ISO from Microsoft’s official site, create a bootable USB with the Media Creation Tool, and reinstall the OS. That is the only supported way to regain full administrator control on a machine that has had the admin account suppressed.

Harry.

To regain administrator access on a Windows business device where the original admin account was removed or disabled, use one of the supported methods below. Note that some steps may require access to Safe mode or existing credentials.

1. Try logging on as the built‑in Administrator in Safe mode The built‑in local Administrator account can still be used in Safe mode even if it is disabled in normal mode.

1. Restart the computer.
2. As soon as the power‑on self‑test (POST) completes, press F8 repeatedly.
3. In Windows Advanced Options, select Safe Mode and press Enter.
4. Select the operating system and press Enter.
5. At the logon screen, choose the Administrator account and sign in.
6. Once signed in, re‑enable or create an administrator account:
   • Open Computer Management.
   • Expand Local Users and Groups → Users.
   • Either:
     • Re‑enable the Administrator account (double‑click it, clear Account is disabled, select OK), or
     • Create a new user and add it to the Administrators group.
7. Restart the PC normally and sign in with the now‑enabled admin account.

If the device is a domain controller, Local Users and Groups is not available. In that case, after starting in Safe mode with networking and logging on as Administrator, use the command line:

net user administrator /active:yes

2. If the local Administrator account was disabled on a server On Windows Server, the same Safe mode method applies. After logging on as Administrator in Safe mode, re‑enable the account as described above so it can be used again in normal mode.
3. If no admin credentials work at all If none of the above accounts are available or their passwords are unknown, recovery options depend on how the device is managed:

• If still joined to an organization (domain or Microsoft 365/Entra): contact the former company’s IT or whoever now administers the tenant or domain. Only they can reset or provision an admin account in a supported way.
• If it is a standalone machine and no administrator credentials are available, the remaining supported option is to reinstall or reset Windows, which will allow creating a new local administrator during setup but will affect installed apps and potentially data if not backed up.

Before making changes, ensure important data is backed up if possible. Enabling or creating administrator accounts changes who can fully control the device, so only do this on hardware that is legitimately owned or transferred.

References:

• How to access the computer after you disable the administrator account
• Find lost files after upgrading Windows
• Find the administrator for your work or school account