sn.exe problem solved
somehow, i had boned up the access control to the machine keys folder. read the first comment from the original post for an explanation. basically, you have to allow yourself access to the machine keys folder before you can use what's in there.
kinda true for most everything else, if you think about it, eh?