Pwdump

All these free password auditors use Pwdump:

http://www.foofus.net/fizzgig/pwdump/

Here's and example use from the command line. This outputs encrypted passwords to a file name passwds:

pwdump.exe -o psswds -x \\localhost

After you have that file, open it with your password auditor of choice. The -x is for 64 bit systems. You may have to disable anti virus or add the folders to you exceptions list to run pwdump.