Windows 7 代表了家用 PC 安全性方面的进步，但操作系统中的管理可能有点混乱。从秘密管理员到用户帐户控制 (UAC)的一切都给临时用户带来了更大的负担。
要控制计算机的管理，您必须了解Windows 7在管理帐户方面的组织方式。尽管是一个复杂的主题，但您应该了解有关Windows 7管理的三件事，以使您的计算机的使用成为一种安全但易于使用的体验。
管理员帐户
(Unknown)许多Windows 7用户(Windows 7)不知道，操作系统的每个安装都有一个隐藏的（有些人称之为秘密）管理员(Administrator)帐户。与仅仅因为属于管理员组而具有管理权限的帐户不同，管理员(Administrator)不属于管理员组，而是更像一个根帐户。
默认情况下，Windows 7中的(Windows 7)管理员(Administrator)帐户是隐藏的，只能使用属于管理员组的帐户解锁。管理员(Administrator)帐户应仅用于故障排除和高级管理职责。
许多人为了让自己的生活更轻松，使用管理员(Administrator)帐户作为他们的默认帐户。Microsoft通过将其隐藏并在首次安装操作系统时强制创建属于管理员组的帐户来阻止此操作。
作为最高级别的管理权限，Administrator账户不受UAC约束；此帐户的所有操作都不会以任何方式受到质疑、中断或覆盖。
管理权限
具有管理权限的帐户属于管理员组，几乎可以完全访问Windows 7的所有区域和功能。但是，这些类型的帐户受UAC约束，拥有这些帐户的用户必须偶尔验证是否需要执行某个操作，例如启动某些程序和启动某些功能。
当拥有属于管理员组帐户的用户想要更改Windows 7中通常需要管理员(Administrator)的内容时，用户实际上不必注销他/她的帐户并使用管理员(Administrator)帐户重新登录。有一个捷径可以节省一些时间。
以管理员身份运行
假设您要解锁管理员(Administrator)帐户。通常，这样的操作需要管理员(require)帐户(Administrator)，但管理员(Administrator)帐户无法自行解锁。如果有必要，您会遇到第 22 条问题或“先有鸡还是先有蛋”的情况。
因此，Microsoft赋予管理员组的每个成员以管理员身份运行某些命令的能力(Administrator)。例如，要解锁管理员帐户，您需要在(Administrator)命令提示符(Command Prompt)中键入以下行：
net users administrator /active:yes
但是，如果您使用管理员帐户将其键入命令提示符，您会收到消息：(Command Prompt)访问被拒绝(Access is denied)。
要解锁管理员(Administrator)帐户，您需要通过右键单击命令提示符(Command Prompt)图标并选择以管理员身份运行来以管理员身份(Run as Administrator)运行命令提示符。
现在，当您在命令提示符(Command Prompt)中键入上述命令时，您将收到消息：命令已成功完成。
如果您对 Windows 7 如何处理管理感到困惑，那么您就是大多数人。一些人将混淆归咎于微软(Microsoft)正试图将企业级安全性整合到基于家庭的产品中。
如果您一无所有，请记住永远不要将隐藏的管理员(Administrator)帐户用作您的日常休闲帐户，并且永远不要向使用您计算机的任何人提供具有管理权限的帐户，除非您希望该人有权访问您计算机中的所有内容，包括访问权限到管理员(Administrator)root 帐户。
Take Control of Windows 7 Administration
Windows 7 represents a step forward in secυrity for home PCs, but administrаtion in the operating system can be a bit confusing. Eνerything from the sеcret administrator to User Account Control (UAС) puts a greater burden on the casual user.
To take control of your computer’s administration, you have to understand how Windows 7 is organized when it comes to the administrative accounts. Although a complicated subject, there are three things you should know about administration in Windows 7 to make using your computer a secure but easy-to-use experience.
Administrator Account
Unknown to many users of Windows 7, every installation of the operating system has a hidden (some call it secret) Administrator account. Unlike an account that has administrative privileges simply because it belongs to the administrator group, the Administrator doesn’t belong to the administrator group but acts much like a root account instead.
By default, the Administrator account in Windows 7 is hidden and can only be unlocked using an account that belongs to the administrator group. The Administrator account should be used for troubleshooting and high-level administration duties only.
Many people, wanting to make life easier for themselves, use the Administrator account as their default account. Microsoft discourages this by making it hidden and forcing the creation of an account that belongs to the administrator group when the operating system is first installed.
As the highest level of administrative authority, the Administrator account is not subject to UAC; all actions by this account are never questioned, interrupted, or overridden by any means.
Administrative Privileges
An account with administrative privileges belongs to the administrator group and nearly has full access to all areas and functions of Windows 7. However, these types of accounts are subject to UAC and users with these accounts must occasionally verify that an action is desired such as the launching of certain programs and the initiation of some functions.
When a user with an account that belongs to the administrator group wants to change something in Windows 7 that normally requires the Administrator, the user doesn’t actually have to log out of his/her account and re-login using the Administrator account. There is a short cut that can save some time.
Run as Administrator
Suppose that you want to unlock the Administrator account. Normally, an action like that would require the Administrator account but the Administrator account can’t unlock itself. If that were necessary, you would run into a catch-22 or a “which came first, the chicken or the egg” situation.
Therefore, Microsoft gave each member of the administrator group the ability to run certain commands as the Administrator. For example, to unlock the Administrator account, you need to type the following line into the Command Prompt:
net users administrator /active:yes
However, if you type this into the Command Prompt using an administrator account, you get the message: Access is denied.
To unlock the Administrator account you need to run the Command Prompt as the Administrator by right clicking on the Command Prompt icon and selecting Run as Administrator.
Now when you type the command above into the Command Prompt, you will receive the message: The command completed successfully.
If you are confused about how Windows 7 handles administration, you are among the majority. Some blame the confusion on the fact that Microsoft is attempting to incorporate enterprise-level security into a home-based product.
If you walk away with nothing else, remember to never use the hidden Administrator account as your everyday, casual account and never give anyone using your computer an account with administrative privileges unless you want that person to have access to everything in your computer, including access to the Administrator root account.
