
Of course you could - but . . .
. . it takes most of a day to set up a Windows 20xx server with Active Director, get it on the network, populate it with names and passwords and assign the needed rights - and we didn't have the name and password for administering the PCs until later.
It only took me about 1-1/2 hours to find a way to break security.