Microsoft stores the passwords in sam files, which are easy to reverse-engineer.
Just google for one of the following:
Hirens boot cd
If that doesn't work, you may have the governments lame protection system on there.
This is easily bypassed by flashing the EEPROM (soldering may be required)