xp login password question

[nihil]

why bother to crack password, if somebody can add another password.
password protection policy now a days is not an effective line of defence even you have uncrackable password.. why i would bother if just add another one.

1. You cannot "add another password" you can only reset the password of an existing user.

2. You can create a new user account.

Both of these require administrator rights and both of them are very obvious.

So, why would you want to crack the password of an existing user?.............. well the only reason I can see is to commit some sort of criminal activity........ it is identity theft.

What you want to do is impersonate an existing user, such that they do not know (their password remains the same, and still works), and that the administrator does not see a new user account.

Password protection is still very valid, as it provides an audit trail and makes users accountable