i have heard of a linux floppy on boot that will allow you to change the admin pass. my school was hacked that way a while back.

Use this: http://home.eunet.no/~pnordahl/ntpasswd/rawrite2.zip



It works with NT, 2K and XP. I use it all the time when client forgets their admin passwords.



I makes a Linux boot disk and allows direct access into the SAM databases.