# Enable Administrator account

The Enable Administrator account step will ensure that the local Administrator account is enabled and configured with a password (useful for troubleshooting purposes).

<figure><img src="https://744643921-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FJO9NLelA0RS8JB4i9oaQ%2Fuploads%2F7dDDNxWGh9fvccpKSHTC%2Fimage.png?alt=media&#x26;token=ced4d163-b8f5-49ad-96de-3688936cd15a" alt=""><figcaption></figcaption></figure>

The value of the AdminPassword task sequence variable will be used as the password.  If this variable is not set, a default value will be retrieved.

As a best practice, Windows LAPS or similar tools should be used to reset the local Administrator account to a uniqe value that can be archived in case it is needed at a later time.

### Setting the Default Administrator Password

To set the default password, you'll leverage the variable AdminPassword which must be set before the "Enable Administrator account".  You can use PowerShell to set a variable, or the built in step definition [set-variable](https://documentation.2pintsoftware.com/deployr/reference/step-definitions/set-variable "mention").  Please note, when you set a variable, it does get logged to the DeployR log.  As mentioned above, ideally you'll use LAPS to manage and secure the local admin account post OSD.