Try these 5 things
1. Boot to the Windows XP_CD
At the first screen, press Enter to set up Windows XP
now.
Press F8 to agree to the EULA (End User License
Agreement)
At the next screen press ESC to continue installing a
fresh copy of Windows XP without repairing.
Do not delete any partitions. Have the customer use the
arrow key to highlight the C: Partition (NTFS) and press
ENTER.
Press C to continue setup using this partition.
On the next screen, highlight the option to leave the
current File System intact which is the default.
On the next screen, Press ESC to choose a different
folder.
On the next screen, make the directory say: WINDOWS1.
(The default is: \WINDOWS Change it to: \WINDOWS1)
It will begin to copy files. At 22% and not more than 25%
turn the system off. Boot again to the Windows XP_CD
At the first screen press the R key for the Recovery
Console. Ensure that the numlock key is turned on, then
when asked to select the Windows installation that you
want to log on to, select the second one ("Windows1" (2)
Enter) then continue with the needed testing/repair as
you would normal.
http://home.eunet.no/~pnordahl/ntpasswd.
Which is a bootdisk method of cracking the password. I've
used this successfully 3 times, on a NON-domain account.
If you plan on using this at home, then odds are likely
you will be OK. If you plan on using this at work, you
should know if you have a domain or not. If you do, there
are some more instructions (in the url above) to get past
the domain controller.
Use windows XP recovery console to manually go in to
c:\windows\system32\config and delete the SAM file.
Someone at Experts-Exchange posted this question:
http://www.experts-
exchange.com/Operating_Systems/Q_20881463.html
Use winternals ERD commander to blank or change the admin
password.
http://www.winternals.com
You may also try this -
http://support.microsoft.com/default.aspx?scid=kb;EN-
US;308402
