[Bush2000]

But it doesn't guarantee that passwords will be compromised, unless it's on a Windows machine.

And if the Windows box has an EFS filesystem installed? What then? Still think it's easy to crack the passwords?

[antiRepublicrat]

And if the Windows box has an EFS filesystem installed? What then? Still think it's easy to crack the passwords?

Mitigation, mitigation, mitigation. That's what Windows security is all about. Got something unsecure? Turn it off or hide it. ActiveX a gaping security hole? Turn it off. Cached passwords a gaping security hole? Turn it off too. If we're turning every feature off because it's a security risk, then why would security-conscious company include them in the first place?