How to Reset a Forgotten Windows Password (Local Admin Account)

Locked out of Windows because you (or a client) forgot the local administrator password? You don't need to reinstall Windows or lose any files. This guide covers four legitimate recovery methods, from easiest to most involved, for Windows 10 and 11 — with notes on where the process differs for older versions.

A note before you start: these methods are for regaining access to a machine you own or are authorized to administer. If you're supporting a client or end user, verify ownership/authorization before proceeding — the same techniques that recover a forgotten password can be misused on a device that isn't yours.

Method 1: Reset via Microsoft Account (Windows 10/11, easiest)

If the locked account signs in with a Microsoft account (not a local account), you can reset the password entirely online, from any other device:

1. On another device, go to account.live.com/password/reset.
2. Select I forgot my password and follow the verification steps (recovery email, phone, or authenticator app).
3. Once reset, sign in on the locked machine with the new password — no local intervention needed.

This only works if the account was set up as a Microsoft account. If the sign-in screen shows a username with no "@" domain and no "Forgot my password" link tied to Microsoft's site, you're dealing with a local account — skip to Method 2.

Method 2: Use a Password Reset Disk (if you created one in advance)

If a password reset disk (USB) was created ahead of time for this local account:

1. At the sign-in screen, enter any incorrect password, then click Reset password when prompted.
2. Insert the reset USB and follow the Password Reset Wizard.
3. Set a new password when prompted.

To create one for next time (do this now, while you still have access): Control Panel → User Accounts → Create a password reset disk, and follow the wizard with a blank USB drive inserted.

Method 3: Reset via Another Administrator Account

If any other admin account exists on the machine and you can access it:

1. Sign in with the working administrator account.
2. Open Settings → Accounts → Family & other users (Windows 10/11), or Control Panel → User Accounts (Windows 7/8.1).
3. Select the locked-out account → Change account type or click into its details → Change the password.
4. Set a new password. The user can sign in immediately with it.

Caveat: if the locked account has files encrypted with EFS or a saved BitLocker/credential vault tied to the old password, forcibly resetting the password this way can make those specific items inaccessible, even though the account itself unlocks. This is a Windows security-by-design behavior, not a bug.

Method 4: Reset via Command Prompt from Installation Media

Use this when no other admin account exists and no reset disk was made. It uses a known Windows Setup accessibility-tools swap technique — it requires physical access and a Windows installation USB/DVD.

1. Boot from Windows installation media (USB/DVD). Select your language, then click Repair your computer (bottom-left) — don't click Install.
2. Go to Troubleshoot → Advanced options → Command Prompt.
3. Identify your Windows drive letter (it's often D: in this recovery environment, not C:):

   wmic logicaldisk get caption

   or, if wmic is unavailable:

   diskpart
   list volume
   exit

4. Back up the built-in Utility Manager binary, then replace it with a copy of Command Prompt (adjust D: to your actual Windows drive):

   copy D:\Windows\System32\utilman.exe D:\Windows\System32\utilman.exe.bak
   copy D:\Windows\System32\cmd.exe D:\Windows\System32\utilman.exe

5. Restart the machine and boot normally into Windows. At the sign-in screen, click the Ease of Access icon (bottom-right corner) — this now launches Command Prompt instead of Utility Manager, running with SYSTEM privileges.
6. Reset the target account's password:

   net user YourUsername NewPassword123

   List existing accounts first with net user if you're not sure of the exact username.
7. Sign in with the new password.
8. Cleanup — do this immediately after regaining access, boot back into the recovery Command Prompt and restore the original file:

   copy D:\Windows\System32\utilman.exe.bak D:\Windows\System32\utilman.exe /Y

   Skipping this step leaves a standing SYSTEM-level Command Prompt accessible from the lock screen — a real security hole if the machine isn't physically secured.

Which Method Should You Use?

• Microsoft account, have another device: Method 1 — fastest, no local access needed.
• Local account, reset disk exists: Method 2.
• Local account, another admin exists: Method 3.
• Local account, no reset disk, no other admin: Method 4 — the only option left, but requires installation media and more careful cleanup.

 

 

Prevent This Next Time

• Create a password reset disk now (Method 2) if the account is local.
• Convert critical admin accounts to Microsoft accounts where policy allows, so Method 1 is always available.
• Maintain at least one secondary administrator account on every machine you manage.
• On managed/domain environments, use your organization's account recovery process (Active Directory self-service password reset or helpdesk) rather than local workarounds.