Is the computer part of a domain? Has it been configured using Policies? What other custom changes to the system have been done? Any non-standard background services running?