If you are not targetting a particular SID remotely then you can simple enumerate the available user hives.
_________________________
Give a man a fish and he will be back for more. Slap him with a fish and he will go away forever.