Unauthorised access in Win2k

I administer 4 computers at church, all have Win2k Pro installed. All computers are up to date on the service packs. One computer is allowing logon with just the user name field filled out and the password left blank when the OK button is sellected.The person who is the operator has been assigned administrator rights. Any suggestions to correct this incident?