only reason he's want the admin password is it makes it easier to get at the hashed passwords file.

you dont however NEED it, it just saves some agro...

nothing you can do about it i'm afraid... if someone really wants to get it, they will (providing they can get physical access to the network)

there are things you can do to make it harder... but stopping it altogether is another matter... if theres something i really wanted to get at... i would

but if you make it tough, i wouldn't bother 99% of the time

best thing is to make your passwords NOT words found in the dictionary... use numbers AND letters (and not easy ones like replacing S with 5 etc. ) make them as many characters as possible, and if at all possible include obscure characters...

a password like: dsf7as!90<3e would take WEEKS to crack... by which point you'd probbaly have given up trying to crack it... lol also if you change your passwords weekly... by the time they crack the password, it's changed

obviously getting normal users to do this is nigh on impossible coz all the daft coonts will forget them but try and do it to your admin accounts