You are correct. I agree with holding all the passwords, and I thought I did, until she convinced the IT guy while I was away that there was a security breach of her personal E-mail and wanted to change all of her passwords everywhere. He of course logged in as the administrator and allowed her to change the password which he assumed would be solely hers! There must be a way that the administrator can have access to all accounts.