Are the PC's on a domain? How many admins do you have onsite? Could any
of the students set a password? Is it possible someone changed some settings?