I've tried the SRVANY trick documented here. After rebooting 3 times into Directory Service Restore mode and tweaking the settings, I have not been able to log-in successfully. So, I'm not having much luck. I also saw a reference to Ophcrack, but from the website it doesn't look like that tool supports Windows Server 2003.
This is an isolated dev system, and it only has one domain administrator.