I found a couple of typos in the "net.8" man page:
"SAMDUMP
Print out sam database of remote server. You need to run
this on either a BDC."
Either a BDC or ....
"VAMPIRE
Export users, aliases and groups from remote server to
local server. Can only be run an a BDC."
Should this be "on a BDC"?