In a Windows setting where you use Ctrl+Alt+Delete (workstation joined to a Windows domain), the only password that matters _is_ the user's password. In this setup, this password gets you access to everything via Windows Integrated Authentication (basically kerberos).