if its a windows system, you have physical access to a copy of the drive, you can use a hash/salt check against known passwords. I have actually done this on my own machine, with a 10 character password, took the decrypter 6 minutes to find it. Again these people are stupid. I a have also done this on a windows server 2008 with a unknown 9 character password, It found it in within sixty seconds. Its not hard its just time consuming to setup. You really only need the registry files from the drive.