@evildictaitor: That's bizarre. Trying to change your password via ctrl-alt-del requires the current one. Why wouldn't net user do the same? Seems like a pretty big oversight.