Ginger Smith called me. I helped set up a domain server for her and the Mission Centers of Houston a while back.
Now, just recently, all the users passwords expired. None of them had changed them, ever. And worse, the administrator password expired.
So, I spent my evening breaking into a domain controller, so that I could change the domain administrator password and unlock the account.
It takes some time to do, but if you have physical access to the machine, it’s not as hard as you might fear. There are some useful tips floating around on the internet, too.