Yes i did use that to change the password to a blank.
but i really wanted to know why ophcrack wouldn't boot the machine.
i looks like i have to carry this disk as well.

Hi Guys,
i have used ophcrack to find user's passwords on several ocations. the other day a user who has an IBM P4 "desktop" running windows XP SP2 asked if i knew his password. Well for my safety i don't remember or do i keep a record of anyone's password excep my own. Just the ability to run ophcrack to get the password is goo enough. this time the cd started to boot up and then it shut dowm. it looked to me that the error had somthing to do with the monitor. when they are able to login there is no problem with the monitor. does anyone have an idea as to why ophcrack would not boot??
thanks.
inetbogey.

OK this is the 3rd time i am trying to respond to this thread.
the way things are going right now i think the biggest problem is ME
my LAN is wired to a switch. the proxy server is wired to the switch.
i have checked the traffic on the LAN before without any problems.
this is the first time i looked at traffic from this XP box.
so how did the XP box know???

Yesterday i was running Cain on my windows 2000 pro laptop.
i was using the sniffer and watching 4 other machines.
while i was watching the traffic to and from a proxy server, one of the PC's i was watching,  gave an error msg about a duplicate IP address and pulled itself from the LAN.(a windows XP Pro SP2 machine)
i use static IP address and have DHCP disabled. i shut down the box, and was not able to find the same IP up on the LAN.
do you think that it found the Cain software? (man in the middle)
can the Cain software be spotted??
thanks.
inetbogey.