Encrypt the SAM database
n
Syskey.exe
n
l0pht crack
n
This does not protect against sniffed NT
hashed passwords (have passwords expire)