Are you talking about on a win9x machine? Delete all .pwl files from the windows directory. Next time they logon to the nt domain enter userid and password, then a box saying enter windows password will come up. Make sure both boxes are blank on it, then hit ok. No more windows password.