Gaining the password to a PWL file gives you any Windows stored password the user has. I recently tried my hands at it via Cain and a brute-force crack, and found inside the username and password for internet dial-ups. Usernames and passwords for secure web sites. And (of course) these were not the same as the Windows login. I bet any usernames and passwords that were different from the "log in to Windows" username and password for network shares would be stored in there as well (although I need to check on that.) Once you have the PWL password, you pretty much have them all. Hence people's wish to crack them...