They are stored in the SAM file it should be located in C:\windows\system32\config\SAM I believe.

Alot of the time they are also cached and can be read easily in the registry
in HKEY_LOCAL_MACHINE\SECURITY\CACHE\NL$1 through NL$10