however, i've just set up an authorised public key in the user account, so now i can log in via ssh as 'user' without needing a password, although I'm not sure how you could generate keys on windows.