You may want to checkout http://www.thebroken.org/ (Episode 3)
Interesting section on windows passwords.