>You must be referring to lOphtcrack and other similar tools? There are govt blocks for those too on certain systems.

Yes, everything you've said is right on target for my agency - we have notoriously tight security here. A little too tight, sometimes "total lockdown," it's called by disgruntled users. Even high level IT security people cannot get into my servers, for example, they're locked up in a secure area where only need-to-know access is allowed.

However, the one thing you can't stop is someone with physical access. As I said, even though I'm an admin with a lot of access rights, I can even get into machines off-limits to me if I can get physically TO the machine - in a few seconds, I'm in, access or no access rights. That's why we have security on people too, I guess, where you need certain clearance to get into certain areas of the building. They are very tight here, especially after 9/11.