Share via

[Windows 11] how to gain local admin access to my work account, if that is the only account on the PC and it does not have local administrator rights

Michal Piňko 20 Reputation points
2025-12-01T11:45:52.8333333+00:00

I have bought notebook for work use without OS. I have performed clean install of Windows 11 Pro (license has been bought separately - but it is valid) from usb, choosing the device to be labeled in the "School or work" category (As I have intended to just use this device with just one work account just for the work related tasks). I have managed to log-in with my "business plan account" after the successful installation without any issues. After this, I wanted to install additional software and MS Office, which is required for my work. At that point I have realized, that I don't have local administrator rights (The account which I am logged in as has "global administrator" rights - but that only applies to the M365 admin center).

I am unable to create another local account which would have local administrator rights or assign rights to already existing business account. I have already tried changing/adding the rights via the settings panel (there is no "Family and other users" tab), tried suggested "net user Administrator /active:yes" command in the command prompt window (it fails with error code 5), lusrmgr.msc (after trying to add another account - it ends up with error window, explaining that I don't have permissions to add users/assign groups to them), compmgmt.msc (basically same issue), netplwiz (I cannot even launch this, as it says "The requested operation requires elevation" - but I have the "global administrator" role, so it just does not make sense as from my understanding this role should have enough permissions). I have tried to enable the built-in local admin, through the advanced startup options, but enabling it did not have any impact, even though I have done it according to step suggested by customer support (from a thread of another person with similar issue).

How can I fix this issue and what are my options ? I don't mind losing data from the PC, as there is basically no important data stored on the notebook, yet.

Windows for business | Windows 365 Business
0 comments
Answer accepted by question author
  1. Harry Phan 9,835 Reputation points Independent Advisor
    2025-12-01T12:11:21.87+00:00

    Hello Michal Piňko

    The behavior you’re seeing is expected when a device is joined under the School or Work category during installation. In this mode, the first account you sign in with is treated as an Azure AD account, which does not automatically grant local administrator rights on the machine, even if you hold a global administrator role in Microsoft 365.

    To resolve this, you have two main options:

    Reinstall Windows 11 Pro and choose “Personal use” during setup. This ensures the first account created is a local administrator. You can then connect your work account afterward.

    Reset the PC and rejoin it to Azure AD with administrator privileges. If your organization uses Intune or other device management policies, the IT administrator can assign local admin rights through those policies.

    Since you mentioned you don’t mind losing data, the clean reinstall route may be the most straightforward. After reinstalling, create a local admin account first, then add your business account for work tasks. This way, you’ll retain full control to install Office and other required software.

    Please let me know if these steps help resolve the issue. If you find this answer helpful, kindly hit “Accept Answer” so we know the guidance worked for you 🙂.

    Harry.

    1 person found this answer helpful.

1 additional answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Q&A Assist
    2025-12-01T11:46:10.6133333+00:00
    AI generated content. This question contains an answer created with AI from Q&A Assist. Learn more

    To gain local administrator access on your Windows 11 Pro device, you may need to perform a clean installation again, this time ensuring that you set up a local administrator account during the installation process. Here are some steps you can take:

    1. Reinstall Windows 11: During the installation process, choose to create a local account instead of using a work or school account. This will allow you to set up a local administrator account.
    2. Use Windows Recovery Options: If you want to keep your current installation, you can try accessing the advanced startup options:
      • Restart your computer and hold the Shift key while clicking Restart.
      • Navigate to Troubleshoot > Advanced options > Command Prompt.
      • In the Command Prompt, you may attempt to enable the built-in Administrator account by typing net user Administrator /active:yes. However, if you encounter an error, this method may not be applicable due to your current account restrictions.
    3. Contact IT Support: If your device is managed by your organization, consider reaching out to your IT department. They may have specific policies in place regarding local administrator access and can assist you in gaining the necessary permissions.
    4. Factory Reset: Since you mentioned you don't mind losing data, you could perform a factory reset of the device, which would allow you to set it up again and create a local administrator account from the start.

    Unfortunately, if the current account does not have local admin rights, options to elevate privileges are limited without a local admin account or IT support assistance.

    0 comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.