Passwords for users and computers are permanently stored on all writeable domain controllers, and can be optionally cached ...