Local administrator groups should not contain the server administrator account....only the domain administrators group...which again is a limited group...they cant elavate you to the server admin...afaik

All depends on the setup...and the admin.

As for cracking the SAM....that is where strong passwords would circumvent.....unless you have ALOT of time....and a very fast computer/s


MLF