That included our main app, so that was pretty much it. I don't remember if Citrix and it played nice, but I think most of our citrix apps pull domain credentials anyway, so it was kind of a non-factor. As far as the one-way hash goes... I still think it's bad idea security wise as lifting and faking fingerprints isn't really that hard. Of course that assumes that passwords that are being typed in aren't mishandled in the, "I'll just write it on a post it and stick it to my monitor" variety.

Crashes during login were rare, but system instability was pretty common as any program relying on the program we tested would flake out and either cause memory access BSoD or need to windows to be restarted in order to work again. While the latter was significantly more common, if it is a program you need to be in, it's really only marginally better than a crash. Less chance of data loss, but then you are still restarting your computer.