The Privilege Escalation Vector
When you purchase a new PC and create the initial user account, Windows automatically assigns that profile “Administrator” privileges, granting it the absolute authority to install software, modify the registry, and delete critical system files. However, if you are handing the computer down to a child or an employee, you must revoke this absolute power. You must instruct the Windows kernel to mathematically downgrade the profile to a “Standard User,” protecting the core operating system from accidental or malicious destruction.
How to Change the Administrator
Windows 11 manages all user account authorization levels directly within the primary Settings matrix.
1. The Prerequisite: You must currently be logged into an account that already possesses Administrator privileges. You cannot grant yourself power from a Standard account without the master password.
2. Open the Start Menu and click the Settings gear icon.
3. In the left-hand navigation sidebar, click on Accounts.
4. Scroll down the main pane and click on Other users (or “Family & other users” depending on your specific version of Windows 11).
5. The Target Selection:
* You will see a list of all secondary profiles currently established on the machine.
* Click the specific name of the user whose privileges you wish to modify.
* The row will expand to reveal new options. Click the button labelled Change account type.
6. The Authorization Matrix:
* A small dialogue box will appear.
* Click the dropdown menu beneath “Account type.”
* To Downgrade: Select Standard User. This user can now only run existing programs and save personal files. They cannot install new software or bypass the firewall.
* To Upgrade: Select Administrator. This grants them absolute power over the machine.
7. Click OK.
The kernel instantly applies the new security parameters. The next time that specific user attempts to perform a restricted action (like installing a downloaded `.exe` file), Windows will completely block the execution and demand the master Administrator password.