I run Windows 98, if he cannot get in the password is the "Cancel" button.
I usually leave my computer on to check email in the background, with Seti@Home as the screen saver. Next time it will have a password on it. But he can still hardware reset the machine and use the cancel button to get in.