first of all it's unlikely that the SAM will be on the box, usually it's on the server so effectively zero access to PWL, and a BF almost never works cause like where i work wild card characters are a must for every password and must be at least 16 characters long so thats a nono on BF what you can do is login in normally load your own SAM from another box onto the box you want access to. login in as admin to get access to files on the box however network folders will be unavailable! so i don't really understand your method