How to Check If Your Windows Account Is Administrator or Standard (11 & 10)

To check if your Windows account is a Standard or Administrator account, open Settings → Accounts → Your info—the label under your account name shows your account type. For a command-line method, open Command Prompt or PowerShell and type net user %username%, then look for "Local Group Memberships" in the output: *Administrators means admin rights, *Users means standard account. Here's the counterintuitive part: even if your account shows as "Administrator" in Settings, Windows still uses User Account Control (UAC) to run most processes with standard privileges by default—you only get full admin rights when you click "Yes" on a UAC prompt.

Jake runs a phone repair shop and was trying to install diagnostic software on his work computer. "It keeps asking for administrator permission," he told Ethan over coffee, "but I thought I was the admin when I set up this PC."

Ethan nodded. "That's actually a common confusion. Windows has a layered permission system, and even administrators get prompted for elevation. Let me show you how to check what type of account you actually have—and what those prompts really mean."

Administrator vs Standard: What's Actually Different

Before diving into the how-to, understand what these account types actually control:

How to Check Account Type in Windows 11

Windows 11 provides multiple methods to verify your account type. Here's every approach, from simplest to most technical.

Method 1: Check in Settings App (Easiest)

This is the fastest way for most users:

1. Press Win + I to open Settings
2. Click Accounts in the left sidebar
3. Select Your info (first option)
4. Look at the label under your account name and email:
   • "Administrator" = Admin account
   • "Standard" = Standard account

If you're using a Microsoft account, it shows your email address with "Administrator" or "Standard" beneath it.

Method 2: Command Prompt Method

For a more technical verification:

1. Press Win + R, type cmd, press Enter
2. Type the following command:

   net user %username%

3. Look for "Local Group Memberships" in the output:
   • *Administrators = Admin account
   • *Users only = Standard account

Method 3: PowerShell Method

PowerShell provides more detailed group information:

1. Right-click Start → Windows Terminal (or PowerShell)
2. Type:

   whoami /groups

3. Look for these SIDs in the output:
   • S-1-5-32-544 = Administrators group (you have admin rights)
   • S-1-5-32-545 = Users group (standard account)

Method 4: Local Users and Groups (Pro/Enterprise Only)

For detailed account management:

1. Press Win + R, type lusrmgr.msc, press Enter
2. Click Users in the left panel
3. Double-click your username
4. Go to Member Of tab
5. If Administrators is listed, you have admin rights

How to Check Account Type in Windows 10

The methods in Windows 10 are similar but the Settings navigation differs slightly:

Windows 10 Settings Path

1. Open Settings (Win + I)
2. Click Accounts
3. Select Your info
4. Under your account name, look for:
   • "Administrator" = Admin account
   • "Standard" = Standard account

The Command Prompt and PowerShell methods work identically in Windows 10—the same commands produce the same results.

Why Admin Accounts Still Get UAC Prompts

This is where most confusion happens. You're an administrator, so why does Windows keep asking for permission?

How UAC Works

User Account Control creates two "tokens" for admin accounts:

1. Standard user token: Used for everyday tasks (browsing, documents, most apps)
2. Administrator token: Activated only when you approve a UAC prompt

This means even though your account type is Administrator, most processes run with standard privileges until you explicitly elevate them.

When You See UAC Prompts

• Installing or uninstalling software
• Changing system-wide settings
• Running certain built-in tools (Registry Editor, Device Manager, etc.)
• Modifying files in protected folders (Program Files, Windows)

For IT Admins: Enterprise Deployment

If you manage multiple Windows machines in an organization, you need enterprise-grade controls for verifying and managing account types across your fleet.

Checking Account Types with PowerShell Remoting

For auditing account types across multiple machines:

# Check-AdminRights.ps1
# Run against remote machines to verify admin rights

 $machines = @("PC01", "PC02", "PC03")

foreach ($machine in $machines) {
    $result = Invoke-Command -ComputerName $machine -ScriptBlock {
        $identity = [Security.Principal.WindowsIdentity]::GetCurrent()
        $principal = New-Object Security.Principal.WindowsPrincipal($identity)
        $isAdmin = $principal.IsInRole([Security.Principal.WindowsBuiltInRole]::Administrator)
        
        [PSCustomObject]@{
            Computer = $env:COMPUTERNAME
            User = $identity.Name
            IsAdmin = $isAdmin
        }
    }
    Write-Host "$($result.Computer): $($result.User) - Admin: $($result.IsAdmin)"
}

Group Policy for Account Management

Control who can be an administrator via Group Policy:

1. Open Group Policy Management Console (gpmc.msc)
2. Create or edit a GPO
3. Navigate to: Computer Configuration → Windows Settings → Security Settings → Restricted Groups
4. Add Administrators group
5. Define which users/groups should be members

Registry Check for Account Type

For scripting or remote queries:

# Check if current user is in Administrators group via Registry
 $user = [Security.Principal.WindowsIdentity]::GetCurrent()
 $isAdmin = (New-Object Security.Principal.WindowsPrincipal($user)).IsInRole([Security.Principal.WindowsBuiltInRole]::Administrator)

if ($isAdmin) {
    Write-Host "User has Administrator rights"
} else {
    Write-Host "User has Standard rights"
}

Security Considerations for Enterprises

• Least privilege principle: Users should have standard accounts for daily work, admin only when needed
• Separate admin accounts: IT staff should have separate admin accounts for administrative tasks
• LAPS (Local Administrator Password Solution): Automate unique local admin passwords across machines

Troubleshooting Account Type Issues

Issue: Settings Shows "Administrator" But Can't Install Software

Cause: UAC might be set to always prompt, or Group Policy is restricting installations.

Solutions:

1. Check UAC settings: Control Panel → User Accounts → Change User Account Control settings
2. Verify Group Policy isn't blocking software installation
3. Run the installer as administrator (right-click → Run as administrator)

Issue: Built-in Administrator Account Missing

Cause: The built-in Administrator account is disabled by default in Windows 11.

Solution:

1. Open Command Prompt as Administrator
2. Run: net user Administrator /active:yes
3. The account will appear on the login screen

Issue: Can't Find Account Type in Settings

Cause: You might be looking in the wrong location, or using a Microsoft account with different display.

Solution:

1. Make sure you're in Settings → Accounts → Your info
2. Look below your email/name for the account type label
3. Use Command Prompt method as backup: net user %username%

Frequently Asked Questions

1. How do I know if I'm an administrator in Windows 11?

Go to Settings → Accounts → Your info and look for "Administrator" under your account name. Or run net user %username% in Command Prompt and check if "Administrators" appears in Local Group Memberships.

2. Why does Windows ask for admin permission if I'm already an administrator?

User Account Control (UAC) runs most processes with standard privileges even for admin accounts. You only get full admin rights when you click "Yes" on a UAC prompt. This is a security feature to prevent malware from making silent system changes.

3. Can I check account type without opening Settings?

Yes, open Command Prompt and type net user %username%. Look for "Local Group Memberships" in the output—*Administrators means admin, *Users means standard.

4. What's the difference between Administrator and Standard accounts?

Administrators can install software, change system settings, modify other accounts, and access all files. Standard users can only modify their own files and settings, and need admin credentials for system changes.

5. How do I change a Standard account to Administrator?

Go to Settings → Accounts → Other users (or Family & other users), select the account, click "Change account type," and choose Administrator from the dropdown.

6. What is the built-in Administrator account?

Windows has a hidden built-in Administrator account that's disabled by default. It has full admin rights without UAC prompts. Enable it via Command Prompt: net user Administrator /active:yes

7. How do I check account type in Windows 10?

Same methods as Windows 11: Settings → Accounts → Your info, or net user %username% in Command Prompt, or whoami /groups in PowerShell.

8. Can a Standard account install software?

Not without admin credentials. When a Standard user tries to install software, Windows prompts for an administrator password.

9. How do I check account type using PowerShell?

Run whoami /groups and look for SID S-1-5-32-544 (Administrators). If present, you have admin rights. Or use: (New-Object Security.Principal.WindowsPrincipal([Security.Principal.WindowsIdentity]::GetCurrent())).IsInRole([Security.Principal.WindowsBuiltInRole]::Administrator)

10. What does UAC actually do?

User Account Control creates two security tokens for admin accounts: a standard token for everyday tasks and an admin token activated only when you approve elevation. This prevents malware from silently gaining admin rights.

11. Can I disable UAC prompts?

Yes, via Control Panel → User Accounts → Change User Account Control settings. Move the slider to "Never notify." However, this reduces security and isn't recommended.

12. How do I find all administrator accounts on my PC?

Open Command Prompt and run net localgroup Administrators. This lists all members of the local Administrators group.

13. What's the difference between local and Microsoft accounts?

Local accounts exist only on your PC. Microsoft accounts sync settings across devices and require internet authentication. Both can be Administrator or Standard type.

14. Can I check account type without admin rights?

Yes, all methods described (Settings, net user, whoami) work for any user to check their own account type.

15. Why can't I see "Your info" in Settings?

Make sure you're signed in and have the latest Windows updates. If using a work/school account, your organization might restrict this page.

16. How do I create a new administrator account?

Go to Settings → Accounts → Other users → Add account. After creating, select the account → Change account type → Administrator.

The Bottom Line

Checking your account type in Windows 11 is straightforward: Settings → Accounts → Your info shows "Administrator" or "Standard" under your name. For technical verification, net user %username% or whoami /groups provide definitive answers.

The key insight is understanding UAC: even Administrator accounts run with standard privileges by default, only elevating when you approve prompts. This isn't a bug—it's a security feature that protects your system.

Jake ended up discovering he was indeed an administrator. "So the prompts weren't broken," he told Ethan. "They were just Windows double-checking that I really wanted to make that change."

Sometimes the "annoying" security features are exactly what's keeping you safe.

Revision note. Updated September 2026, covering Windows 11 and Windows 10 latest editions. Windows 10 reached end of support on October 14, 2025. We hope this guide helps you understand your account permissions—if you have questions about a specific scenario, feel free to reach out.