I find myself in a situation where I have to crack a SAM file from a XP machine. I was able to recover the file by moving the hard drive from the machine in question and placing it in a forensic workstation where I could then access the drive. I am running LC4, but according to the session start it says it can't crack the SAM if if was done in syskey. Has anyone been able to crack syskey? This is a legitimate investigation and one I don't particularly enjoy having to do. Unfortunately it is my job. Any help is appreciated.