SAM contains local user account and local group membership information, including their passwords.
Password information and privileges for domain users and groups are stored in Active Directory.
Because of the sensitivity of the data that is stored in this database, SYSTEM privileges are needed to open this registry key. This is possible with the Sysinternals tool PsExec.