With Local Security Policy app (secpol.msc) By default, it comes with a policy that instructs Windows 11 to keep the Administrator account disabled, but you can change that. Yet another alternative is the built-in Local Security Policy app (secpol.msc).