Published: April 2nd 2025

How to create a local user with administrative rights in Windows 11 24H2

What is the difference between a local and an online account?

In Windows 11 24H2, you are forced to create an online account during the first run.

A Microsoft Account is an online account, which uses your email and password to sign in to the computer. It offers more security, provides more recovery options in case you forget your PIN or password, syncs your themes, apps and settings to the other devices with the same Microsoft account, reduces activation hassle etc.

A local account is a kind of offline account, where the account details are limited to only one PC. No data is synced to other computers, and apps that require sign-in must be signed in separately using a Microsoft Account.

Why do you want to create a local user with administrative rights?

When Microsoft authentication fails because of a corrupt profile or corrupt Windows Hello authentication (fingerprint or face sign-in) in combination with tight security, you may not be able to logon to your computer. In that case you need a backup admin account (or emergency access account) which is a local user with administrative permissions. That user has its own profile and does not depend on Windows Hello or Two-Factor authentication. Because of its administrative rights, that user should be able to solve issues with your own profile or authentication.

How do  you create a local user with administrative rights?

Microsoft does not want you to create a local user. In earlier Windows versions it was possible to easily create a local user account from the Control Panel or Settings. In Windows 24H2 it is still possible, but you have to find out where Microsoft hides this option.

Your own user account should already have administrative rights to create a local user with administrative rights. This is how you do it:

 

Search for “Netplwiz.” or run Netplwiz.cpl. Click “Add”.

Microsoft Windows 11 24H2 create local user administrative rights admin administrator emergency access account mfa 2fa authentication

Click “Sign in without a Microsoft account (not recommended)”

Microsoft Windows 11 24H2 create local user administrative rights admin administrator emergency access account mfa 2fa authentication

Click “Local Account”

Microsoft Windows 11 24H2 create local user administrative rights admin administrator emergency access account mfa 2fa authentication

Fill in all fields and then click “Next”.

Microsoft Windows 11 24H2 create local user administrative rights admin administrator emergency access account mfa 2fa authentication

Click “Finish”.

Microsoft Windows 11 24H2 create local user administrative rights admin administrator emergency access account mfa 2fa authentication

Verify that the user is added and that it is only a member of the Users group.

Select the new user account and click “Properties”.

Microsoft Windows 11 24H2 create local user administrative rights admin administrator emergency access account mfa 2fa authentication

Click tab “Group Membership”.

Microsoft Windows 11 24H2 create local user administrative rights admin administrator emergency access account mfa 2fa authentication

Select “Administrator” and click “OK”.

Microsoft Windows 11 24H2 create local user administrative rights admin administrator emergency access account mfa 2fa authentication

Verify that the new user is a member of the Administrators group and click “OK”.

After this you should logout and login as the new user to verify that the user creation was successful and that the user has administrative rights.

Do not forget to save the local backup admin credentials in a password manager that is stored in a safe place.

Now you have successfully created a local backup admin user in case of emergency.

Microsoft Windows 11 24H2 create local user administrative rights admin administrator emergency access account mfa 2fa authentication
Delen