I once went to a Microsoft Bootcamp school in a 3rd-world country (don't ask, it seemed like a good idea at the time). It was a "Gold Star" MS facility but they were running their training "labs" on bootleg Win2K servers, which they had lost the log-in passwords to. I was travelling with a copy of a 'hacker's' CD known as Hiren's Boot CD (what kind of geek would I be if I didn't?), which I booted their servers off, accessed the HDD like NTFS had no protection whatsoever, and blanked out the administrator's PW so next time it was booted, it would ask the user to input one.
They made me a god (unofficially, of course).
https://www.hirensbootcd.org/howtos/#collapse-1-208
We techies swear by Hirens Boot CD. I keep it on a USB thumbdrive when I travel.