OK, so here goes after a lot of trial and error:
background: My client recently took over another firm. However, apparently the administrator passwords to the server (along with some other non-IT stuff) hadn't been passed on. And now i'm charged with the task of re-gaining administrator privileges.
So, we have multiple user accounts in an AD environment. The ones accessible are very restricted: we can only add/change printers and log off. We can open a single directory on the D: drive and put files on the desktop. I can create a shortcut to cmd and regedit, but i can't make registry modifications or execute a net user command to change the administrator password. I also can't check the password with ophcrack. The annoying bit is that i can't get any of the livecd tools to work either (though i have physical access to the server if it's really necessary).
In summary, I have a very limited account from where i want to "break into" the admin account.