said by redwolfe_98
:did you create a password for the "administrator" account? if not, that is probably how he is able to bypass any other passwords, if he can login to the administrator account by simply leaving the password for it blank..
to create a password for the administrator account, go to "start"/"run" and type "control userpasswords2" and then press "OK" and then create a password for the "administrator" account..
Good point. Most users don't bother to set a password for the built-in Administrator account (why Microsoft doesn't require that during set up I'll never know) but that would certainly be a good thing to check.