Lifting AD passwords w/physical access

[Thorazine]

Can anyone tell me how to lift passwords from the ntds.dit if I don't have user/password combination with Administrative rights but I do have physical access to the machine?

[greEd]

While I do know how to extract the ntds.dit file with physical access to a win2k ADB and hash the database, posting how to on a message forum is not something I'm going to do .... I'm sure you can understand why.
However if you need more information feel free to e-mail me.

regards,
greEd