If syskey is enabled (Windows 2000 + ?) then the hashes are also encrypted in the SAM and cannot normally be read. There are several ways around this.

- Use the running Windows to decrypt the...