I think KeePass with the key file option (not readable by user accounts, run KP as admin) is the best solution on Windows I've found.