I was wondering if anyone knows of a tool that can strip active directory passwords without haveing DC admin rights? Also a tool for pinning down user accounts with DC admin rights would also be greatly appriciated... by the way the network is mostly win 2k workstations and servers a few win NT servers but not the DC's.. thanks