AFAIK, this cannot be done with any tools. Wouldn't it be illeagal?

>If you have rights as a Domain Administrator, but the Domain Administrator group does not have Local Administrator rights on the workstation, you may not be able to change the local Administrator password directly using standard NT tools.