System Message "Preparing Security Options ( Ctrl + Alt + Del )"

FreeBooter · 20 Jan 2018

OP I suggest using it sparingly, only when you need to perform several administrative and don’t want to be bothered by UAC prompts. Initially, this ‘super’ hidden Administrator account does not have a password, a serious vulnerability for a full-fledged administrator account. Best to assign a strong password to this account at the earliest opportunity.

Enable or Disable Elevated Administrator account in Windows 10 User Accounts Tutorials

Word Man · 20 Jan 2018

lx07 said:

You should never do that. Administrator has blank password so if you enable it anyone can either sign on or use their token.

If you want to enable it you should say

Code:

Net user Administrator ABCDEFG /Active:yes

...

Just wanted to follow up - that password will stick once it's been assigned, even if then set /active:no, so /active:yes without password will require the prior set password to log in.

But, yes, you should NEVER leave "administrator" with a default blank password and it's best practice to go back to /active:no once you've finished whatever prompted you to activate it.

netkingcool · 20 Jan 2018

Dear All,

Thank you very much. I believe that with your help, I can now configure my pc more securely.

I will make a fresh install and follow all your advice.

Cheers

Alberto P.

lx07 · 21 Jan 2018

Word Man said:

it's best practice to go back to /active:no once you've finished whatever prompted you to activate it.

Yes it is - you are quite correct and I forgot about that.

Assuming one might forget to do this though it is better to have set a password than not though (although any Admin user can reset it of course).

RichardC · 21 Jan 2018

If you select a password for administrator and you want to change this back to 'blank', how do you do this in command prompt? I would rather leave it blank and just deactivate administrator log in.

FreeBooter · 21 Jan 2018

RichardC said:

If you select a password for administrator and you want to change this back to 'blank', how do you do this in command prompt? I would rather leave it blank and just deactivate administrator log in.

You can reset build-in Administrator account password to blank password by executing below command:

Code:

Net User Administrator *

You will be prompted to enter a password just hit Enter key each time you are prompted to enter a password this will reset Administrator password.

RichardC · 21 Jan 2018

thanks free booter. Did as suggested.

FreeBooter · 21 Jan 2018

RichardC said:

thanks free booter. Did as suggested.

You are very welcome!