From: Mike N. 

On Fri, 22 Oct 2004 06:12:35 -0500, "Geo"  wrote:

>Ok, I know syskey and have used it to block LC but does that help you get
>around this
>http://www.jsifaq.com/subi/tip4300/rh4386.htm
>
>Personally, I think if you make your computer a domain member it will make
>things sufficiently more difficult.

  Assuming I never created a password reset disk, there's still no way into
the SAM to create a password reset disk.   Someone could replace the SAM
and log in as Administrator, but that still gives them no access to the
LSA, EFS keys, or original accounts..

  If you have a laptop, you still need to be able to take it offsite /
offnetwork and function standalone.   So the domain member is not practical
in my case.

--- BBBS/NT v4.01 Flag-5