How to Enable Windows Build-in Administrator Account From Windows RE

How to Backup Registry
[mod] Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by using another method. I cannot guarantee that problems resulting from modifications to the registry can be solved. These problems might require that you reinstall the operating system. Modify the registry at your own risk.[/mod]

Before enabling Windows build-in Administrator account while Windows offline, learn how to backup and restore Windows registry.
When you invoke the Export function from "File  -->  Export", you are given a choice of different file types that can be saved :

Registration Files (*.reg)
Registry Hive Files (*.*)
Text Files (*.txt)

If you export the registry as a Registration File with an REG file extension you can restore this backup by double clicking on it. Exporting to hive files is my choice most of the time. There is a undesirable disadvantage when you backup registry as Registration File reason is that the Registration File backup does not delete values or keys that has been created after you export registry as a Registration File backup it will only restores what has been backup but if you export registry as a hive file its much more accurate than either type of REG file. They are the same format as the Windows OS working hive files, so they represent settings exactly the same way. Also, when you import a hive file, Registry Editor deletes the branch it's replacing before importing the settings. In other words, the editor removes any settings that exist in the working registry but not in the hive file you're importing. When restoring keys from a backup after an unsuccessful registry edit, this is exactly the behavior you want. Their only drawback is you can't view them in Notepad.

Before making any changes in registry you should backup the SAM registry hive key settings.
From registry editor select the registry key which you want to backup and from menu bar click “File  -->  Export” select a  location where you want to backup registry and give the registry backup a file name.
When you backup the registry as a hive files without file extension and then to undo the changes you have made in registry click “File  -->  Import” from menu bar and select the registry backup file.



How to Enable Windows Build-in Administrator Account
Windows OS has a Administrator user account which is disable by default this account can be enable within Windows Recovery Environment (WinRE) with registry editor and after enabling the Administrator account any Windows user account password can be resetted or change from Command Prompt by typing Net User UserName * command, replace the “UserName” with name of the user account and pressing Enter key twice for each password prompt to reset the user account password. Windows build-in Administrator account has full system privileges to make any changes to Windows OS this account should not be use as regular user account for security reasons and should be disable after you have finish your work within Administrator account.

1. Open the registry editor by typing regedit into Command Prompt.

2. Enable Administrator account by selecting the HKEY_LOCAL_MACHINE and load the SAM registry hive from Windows\System32\Config directory.

3. Navigate to “SAM\Domains\Accounts\Users\Names\Administrator” key.



4. The Type column of the Default value data indicates the registry key name under the “SAM\Domains\Accounts\Users” key select the key indicated by the Type column.

5. Edit the "F" value data navigate to position 0038 move the cursor to the beginning of position 0038 and press Del key and then type 10 and click OK button and then unload the SAM hive by selecting the temporary key name where SAM is loaded and then from File menu click Unload Hive.




After you have reboot the system, you can log on using the built-in Administrator user account.



Disable Build-in Administrator Account
After you have no need for build-in Administrator account disable it for security reasons.

1. To disable build-in Administrator account login to any user account that is member of the Administrators group.

2. Open the Command Prompt by clicking Start Menu --> All Programs --> Accessories, right-click on Command Prompt, and open it as an administrator. In Windows 8, 8.1 and  Windows 10 simply hold down the + X keys and select the option “Command Prompt (Admin)” from the menu.

3. Type following command and press Enter key.



Above command will disable the build-in Administrator user account you can enable it when needed by entering following command.