When the system is in operation, the SAM cannot be copied, or accessed directly except by the system and administrators. Permissions on the Registry folders and files are limited.Permissions on relevant Registry keys are set to allow only the operating system access.
The original Windows NT 4.0 database is protected by several techniques: The Security Accounts Manager (SAM) stores the user passwords in a protected database.
