na zdoraznenie dolezitosti "fyzickej" bezpecnosti doporucujem vyskusat nastroj DreamPack PL, za 5 min som v systeme a nepotrebujem vediet ziadne heslo:

This is the only soft that allow you to log on into any local account without reset existing passwords.
DreamPackPL will just turn off the password validation process. If you dont want to log on into any existing account, then you can execute any application (e.g. Regedit or window with accounts management) at the logon desktop. You may also load the Explorer shell at new desktop and work with admin privileges.

http://www.d--b.webpark.pl/dreampackpl_en.htm

jedinym obmedzenim pre Windows XP, je nedostupnost EFS sifrovanych suborov, pretoze na ich desifrovanie je nutna znalost hesla uzivatela ktory ich zasifroval