We've been trying to extract the active directory user account passwords from the Primary Domain Controller in order to set up a new clean DC ( so dcpromo and syncronisation is out of the question) but haven't found a way so far. The Ideal Administration Tool from Pointdev didn't give any results as far as the passwords are concerned. Any ideas on how to do it ?