There's also a linux boot floppy that you can use to boot the system, it has NTFS drivers and allows you to find the SAM database and you can then overwrite the administrator password.
As long as the system isn't a domain controller it should work fine.
google on samcrack, otherwise shoot me an email and I'll see if I can send you the files.