yeah, it depends on how gullible the sysadmin is, like if someone calls and says "I'm the ceo, I need the admin password for all our servers" does he say "sure, it's ****" or "come by my office in person and I'll give it to you"