How to lock yourself out of Windows Vista
Vista’s new User Account Control (UAC) is a great feature that means you don’t need to be logged in as an administrator all the time. If you practice safe computing under Vista, then you should be running a standard user account, with limited security privileges.
If an application needs administrator privileges - to change system settings or install software, for example - Vista will prompt you, like this:

Don’t authorise it and the application will be blocked. The advantage being that if you run a virus by accident it’s limited in what it can do to your machine, since you’re limited in what you can do on the machine.
However, it’s not without its problems - the main one being it’s actually possible (though highly unlikely accidentally) to lock yourself out of the administrator account for your machine. Find out how, after the jump.
WARNING: If you follow these instructions you might have to install Vista again - if you do it’s not my fault, okay?
During setup, the account you create will be set as an administrator - otherwise you wouldn’t be able to configure your machine. The standard built-in Administrator account is disabled by default.
If you’re the only administrator on the system and you try and demote yourself to a standard user, Vista (quite sensibly) won’t let you:

However, if you open the Computer Management console (right click on Computer in Explorer and click Manage) and go to System Tools >> Local Users and Groups >> Users, then you can re-enable the built-in Administrator account. Right click on the Administrator account, choose properties and then untick ‘Account is disabled’ and hit OK.

You’re now free to change your own account to a standard user since there’s another administrator on the machine. You’ll need to log out and back in again to become a standard user.
After you’ve done that, you can go back into the Computer Management console and disable the Administrator account again (right click, Properties, tick ‘Account is disabled’, OK). (If you’re actually doing this DO NOT CLOSE the Computer Management console)
Now if you try and do something that requires administrator privileges you’ll see this prompt:

Vista is asking you to choose an administrator account, but doesn’t list any (since the only one there is is disabled) and the OK button is greyed out. You are now locked out of the admin account for your own machine.
Provided you haven’t closed the Computer Management console yet, you can just re-enable the built-in Administrator account. If you’ve already closed it, then you’ll need admin privileges to open it again - which means you’re pretty much stuck.
If you do do this, and can’t get your admin account back then I’m afraid I can’t help you - either with Vista or in life…

Previous

14 Responses to “How to lock yourself out of Windows Vista”
Kevin J. Kitson
Feb. 13/2007/10:04pm
Aha…
Had the same problem then thought…. what happens in “Safe mode then?”
Well tried it, and guess what Vista needs a priviged account (Administrator) to work in safe mode… What’s more, as I had not done anything with the default administrator account, there was no password !!!
This was a major bonus, but also raises some concerns around security..
Well, at least you have a get out now.. Good luck and let me know how you get on
AC
Mar. 4/2007/7:07am
Thank god Kevin mentioned the safe mode trick… I locked myself out ‘experimenting’, and expected the built-in admin to popup like it did in XP.
Three days without an admin account… never experienced a worse nightmare in my life :P
Keith
Mar. 26/2007/6:55pm
I did this accidentally. I had my machine set up for software development on XP and upgraded. When I downgraded my primary user to Standard User, I got locked out. MS Tech Support has escalated it and they are trying to find a solution, but I can’t even get into Safe Mode because I use a Microsoft Natural Ergo 4000 keyboard, and Windows disables it during bootup, so even if I pull the power during reboot to get a Safe Mode menu, the keys do not work
Keith
Mar. 27/2007/5:18am
I’ve been on the phone with Microsoft (6 hours in 2 days!), and here’s an interesting facet to the issue:
In my situation, Safe Mode does not work. Why? 1 person at MS has figured out why (the others won’t even listen to me when I tell them…they still say I have a corrupted account). Basically, if you log into Safe Mode, and you have no enabled user account, Windows will temporarily re-activate Adminsitrator in Safe Mode. HOWEVER, on my machine, XBox 360 set up a non-welcome screen admin account for Media Center Extender use. The problem is that when Safe Mode comes up, Windows says “If there are no enabled admin accounts, temporarily enable Administrator.” What Windows *should* be doing is say “If there are no enabled user-accessible admin accounts, temporarily enable Administrator.” Maybe someone at Microsoft can say “UAC isn’t security feature; it’s a guide” or something like that, but in my opinion, this is a bug in Safe Mode in that it incorrectly factors in hidden admin accounts when determining whether or not to temporarily enable the built-in admin.
Downside is, I am completely locked out (I also bought Vista online from MS, so I dont’ have a DVD with which to run recovery environment…I was actually yelling at tech support when, for the 5th(!) time in a row, the guy told me “we” had to burn a DVD after I told him my machine doesn’t have a DVD burner.)
So I honestly believe that even taking out all the “well you’re doing an advanced thing, so it’s by design” argument, it’s still bug due to the Safe Mode issue (I also believe MS needs to get around to updating the Local Users and Groups MMC snap-in to catch up to the protections the control panel applet provides) Unfortunately, MS took out every singlealternative means for accessing that account short of performing a System Restore (and guess what: I didn’t reboot after getting in this situation for 2 weeks, so a restore sets back 2 weeks of my work)
Seriously, I think this represents a serious logic flaw in Microsoft’s flawed attempt at Draconian security, and it has disrupted me so much (I’m a consultant who lost the 3 days right before a dealine due to this) that my work situation has been seriously affected. I look at how many people have had this issue and for how long (I’ve found them going back to January easily), yet MS tech support still has so little idea of the issue (or even the notion that lack of admin rights in Vista means you cannot launch command prompt and grant yourself admin rights) that they can send a customer through the same hour and a half troubleshooting call 3 times and act puzzled as to why it won’t work every time.
Sorry for ranting, but I have been hit extremely (no exaggeration) hard by this problem and have been on the phone with MS for almost an entire workday.
Robyn Van Pelt
May. 30/2007/4:49pm
I can’t find a solution to my problem here. I bought a lapton on May 16. Worked fine until Friday May 25. I turned off the laptop and then when I went to go back into it again, I keyed in my password and I am being told that I have an invalid vkey. I had to put in a vkey to get the Vista Windows in the first place. I cant get into my laptop at all. Forget about getting anyone to help from the store where I bought it. Do you have have ideas? I am using my computer at work to send this message.
Thanks
Robyn Van Pelt
JW
Apr. 18/2008/6:09am
The safe mode thing works, even if you lock yourself out of administrative privileges. All you have to do is press F8 (either press and hold or press repeatedly) while Vista boots and then select “Safe Mode.” As said above, this automatically brings up the Administrator account (no password necessary) and you can then reset your usual account to “administrator.” This is a very serious security weakness in Vista. It potentially makes setting a password for any account superfluous.
ask
Apr. 29/2008/2:45pm
When I read the title in the RSS I was like - wthell is up with the Parental Controls in Vista, but thank God it’s just a new little hacker :)
Tin
May. 8/2008/1:32am
A client of mine found an even better trick: Lock yourself out of Vista altogether!
Simply delete all enabled user accounts (including the one you are logged in as) remembering to leave the Administrator account disabled. Then log out.
I suggested safe mode while they were on the phone, but I wasn’t sure if it would work so after 3 goes of missing the time to press it, I said I’d fix it for them later today.
Tee
Jun. 17/2008/4:17am
Use “Offline NT Password & Registry Editor” to either unlock the Administrator account or promote another user to the local administator group to regain access to your locked Windows Vista PC.
Matt
Jun. 19/2008/12:20pm
Well I’m now locked out of XP.
I basically disabled my admin accounts in regedit, I set the Administrator to 0 instead of 1.
I wanted windows to just boot up into windows and for me not to have to select the admin icon.
Now when I boot up it asks me to select an account, but there is no account, no admin no user.
Its the same in safe mode, I have no way of getting into my pc, and I’m panicking.
I have so much work on this pc and so much personal stuff, ‘m going to lose, can anyone help me get back in, just so I can change the settings.?
Thanks in advance.
Mike
Jul. 16/2008/12:21am
try this link, it’s a emergency boot cd that allows you to boot to a linux kernal command prompt and can read the SAM file on xp and earlier versions of Windows. burn it to disk and boot to it, you will need to set the CMOS boot prioity to the CD rom as first boot choice.
http://www.linglom.com/2007/08/16/how-to-reset-administrator-password-on-windows-using-ebcd/
rod
Sep. 9/2008/11:22pm
Hey matt,
Looks like you’ve just hidden the account on the welcome screen. if you Ctrl Alt Del twice it should bring up a different login prompt and you can manually type in the username and password. You should press the Ctrl Alt Del like your tapping your fingers 1 then 2 then 3, but you have to hold each key down when you press the next key…get it?
hope that helps.
Suyash
Oct. 23/2008/9:03pm
Please help me, I have windows vista basic and would like to remove my locking feature as if i leave my laptop untouched by 5 minutes it automatically gets locked as it is pretty annoying as would be working simultaneously.