How to Create an Additional Administrative User on a Windows Server

Introduction

For security reasons, it is recommended to create a separate administrative user instead of using the built-in Administrator account for regular RDP access.

The built-in Administrator account is commonly targeted by automated brute-force login attempts. Creating an additional administrative user with a different username provides an alternative account for administrative access.

Create an Additional Administrative User

1. Log in to the Windows server using the console or an existing administrator account.

2. Open Computer Management by pressing Windows + R and entering:

   compmgmt.msc

3. Navigate to:

   Local Users and Groups → Users

4. Right-click Users and select New User.

5. Enter a new username that is different from Administrator.

   For example:

   • newadmin
   • adminuser

6. Enter a strong and unique password.
7. Click Create and then Close.
8. Right-click the newly created user and select Properties.
9. Open the Member Of tab.
10. Click Add.

11. Enter:

    Administrators

12. Click Check Names and then OK.
13. Click Apply and OK.

The new user has now been added to the Administrators group and can be used for administrative RDP access.

Recommended Security Measures

We recommend the following when creating and using the additional administrative account:

• Use a username different from Administrator.
• Use a strong and unique password.

Conclusion

Creating a separate administrative user with a non-default username provides an alternative account for administrative access and reduces reliance on the built-in Administrator account.