I've just tested rpc vampire from CVS against win2ksp3 and it seems to return the NT/LM password information correctly. Would anyone else like to confirm this? I haven't tested against win2k3 yet. Tim.