Reply to Message

So even accounts that are encrypted, once the password is reset/removed, they can still be accessed? I ask as I won't encrypt the account if it is this easy to gain access to everything. I assumed the password was used as part of the encryption key in winxp