$adminAccount = Get-WmiObject Win32_UserAccount -filter "LocalAccount=True" | ? {$_.SID -Like "S-1-5-21-*-500"} if($adminAccount.Disabled) { $adminAccount.Disabled = $false $adminAccount.Put() }