How to Disable Admin and Guest Accounts in Windows 11

Securing a Windows 11 PC often involves deactivating unused system accounts that could serve as potential entry points for unauthorized access. This guide explains how to quickly and safely disable both the built-in Administrator account and the Guest account using Command Prompt, PowerShell, Computer Management, and the Local Group Policy Editor.

Method 1: Using Command Prompt (All Windows 11 Editions)

Using the Command Prompt is the fastest way to disable these accounts across Windows 11 Home, Pro, and Enterprise editions.

  1. Press the Windows Key, type cmd, right-click Command Prompt, and select Run as administrator.

  2. To disable the built-in Administrator account, enter the following command and press Enter:

    net user Administrator /active:no

  3. To disable the Guest account, enter the following command and press Enter:

    net user Guest /active:no

  4. Look for the message The command completed successfully to confirm the change.

Method 2: Using Windows PowerShell

PowerShell provides dedicated cmdlets to manage local user account statuses directly.

  1. Right-click the Start button and select Terminal (Admin) or search for PowerShell and choose Run as administrator.

  2. To disable the Administrator account, run:

    Disable-LocalUser -Name "Administrator"

  3. To disable the Guest account, run:

    Disable-LocalUser -Name "Guest"

Method 3: Using Computer Management (Windows 11 Pro and Enterprise)

For users who prefer a graphical interface, the Local Users and Groups console allows visual management of system accounts.

  1. Press Windows Key + R, type lusrmgr.msc, and press Enter.
  2. In the left pane, click on the Users folder.
  3. Right-click the Administrator account and select Properties.
  4. Check the box labeled Account is disabled, then click Apply and OK.
  5. Repeat the process for the Guest account: right-click Guest, select Properties, check Account is disabled, and click Apply and OK.

Method 4: Using Local Group Policy Editor (Windows 11 Pro and Enterprise)

Group Policy enables you to enforce system security policies regarding default accounts.

  1. Press Windows Key + R, type gpedit.msc, and press Enter.
  2. Navigate to the following path: Computer Configuration > Windows Settings > Security Settings > Local Policies > Security Options
  3. Locate and double-click Accounts: Administrator account status.
  4. Select Disabled, then click Apply and OK.
  5. Locate and double-click Accounts: Guest account status.
  6. Select Disabled, then click Apply and OK.