I've done it a few times but my favorite hack for Windows is to use a bootdisk to swap the accessibility app with command prompt so you can wipe the local admin password.

Did something similar with a Windows help file that spawned a copy of File Manager. Very cool.