UK school’s network left wide open for invasion, student found

And the admin password was right in the Active Directory description field