In my shop, we have stand-alone Windows 2003 Server. The whiz-kid who runs this server (not me, I'm the "Syadmin Who Fixes Things"; I work closely with the "Sysadmin Who Fucks Everything Up ...

Windows finally includes a tool to manage local admin passwords, but admins will still need to do some work to make it useful.