Windows 2000 domain controllers do not store domain users in the sam file.
Active Directory uses ntds.dit. I know of know way to do what you want with
that file. You would need to be logged on as a domain admin to use a program
like LC5 to audit passwords. --- Steve
Whatever password auditing software you choose to use will have instructions
or will do it for you. L0phtcrack does. I believe PWdump3 is one such
utility.