> I ran l0phtcrack against our Windows NT 4 server to see if it could crack passwords. Lol, did the same thing for a government entity I was working for, also

> I ran l0phtcrack against our Windows NT 4 server to see if it could crack passwords. Lol, did the same thing for a government entity I was working for, also without prior permission. It showed 1/4 of the people used the name of the entity as there password, including 2 users with domain admin credentials. Both of the domain admins weren't even IT people, there were the director and his assistant, who demanded to be admins, because they were 'admin' within the org. In my case, I didn't get scolding, but probably should have. As you're prior boss said, it was not good to do it on a running production server. Now a restored backup running on a private network...