Local admin accounts vs. the default Administrator account

by Mitch Tulloch [Published on 13 June 2012 / Last Updated on 24 May 2012]

What’s the difference between the local Administrator account in Windows 7 and a new user account you create on the system that belongs to the Administrators local group?

In Windows 7 there are a couple of differences between the local Administrator account and any new user accounts you create on the system that belong to the Administrators local group which you should be aware of.  Specifically:

The default Administrator account has a well-known SID

By default UAC does not apply to the default Administrator account (unless specified by Group Policy).

On home SKUs of Windows 7, by default the default Administrator account has no password and cannot authenticate over the network.  In addition, by starting the system in Safe Mode the user can log in with no password for recovery and troubleshooting purposes.

Mitch Tulloch is a seven-time recipient of the Microsoft Most Valuable Professional (MVP) award and widely recognized expert on Windows administration, deployment and virtualization. For more tips by Mitch you can follow him on Twitter or friend him on Facebook.

The Author — Mitch Tulloch

Mitch Tulloch is a widely recognized expert on Windows administration, networking, and security. He has been repeatedly awarded Most Valuable Professional (MVP) status by Microsoft for his outstanding contributions in supporting users who deploy and use Microsoft platforms, products and solutions. Mitch has published over two hundred articles on different IT websites and magazines, and he has written or contributed to almost two dozen books and is lead author for the Windows 7 Resource Kit from Microsoft Press. For more information, see www.mtit.com .

Latest Contributions

Featured Links