In my early Windows NT administration days, I discovered an obscure feature of User Manager for Domains. In addition to using the utility to view and edit user and group accounts in a domain, you can use the utility to manage workstation and member server accounts. Run usrmgr.exe and click Select Domain on the User menu. By default, User Manager for Domains lists all the domains on your network. To connect to a workstation or member server's local accounts, enter


in the Domain field and click OK. You can then remotely administer the machine (e.g., change account passwords, alter permissions). This trick also works from an NT machine to a Windows 2000 machine.