From: "Geo" 

You may be right, I may be thinking of a case where a user who has a login
is trying to get the cached admin password.

Geo.

"Mike N."  wrote in message
news:ohpnn01je3bul81qu7kkhv6tro1emkobmb{at}4ax.com...
> I'm not sure, but I believe a cached domain admin login is still covered
> under a syskey level 2 or 3 encryption because both the SAM and LSA are
> encrypted.  So you'd have the syskey login to crack before anyone could
get
> to a domain admin login - today this just means grinding through all
> possible alphanumeric password combinations on a lengthy decryption.

--- BBBS/NT v4.01 Flag-5