Has he tried to just hit enter with no password? Sounds silly but I have seen users keep entering passwords into the box just because there was a password line there.
Does he have any other accounts setup on the pc besides the administrator account with admin rights?
