Encrypt the SAM database
n Syskey.exe
n l0pht crack
n This does not protect against sniffed NT
hashed passwords (have passwords expire)