Help with system32 in a way

Hello. Me and my friend are tying to see which one of us can get each others pw's first lol ik it is probably a stupid and childish thing to do but here is how it goes. We each get an hour a day on each others strictly limited guest account we are not allowed to use the admin account on the comp. the point is to get the pw not mess with each others files.

so far i have established that i can make .bat files
cmd.exe is blocked but command.com is not
 the "at" command is blocked

My question is this
I have copied my friends system32 to my flash drive. Is there a way to get his pw through the files i have obtained on my computer at my house? If so what programs would i need to use and is it possible to run such programs on his restricted account so i can do it on his comp? {btw i cant install or run certain software EX.  U3smart from my other flash drive)

All help and advice is greatly appreciated

[Moderator]

Sorry.

Even if this is a "fun" project and it's a challenge for you and your friend the info won't be found here.

Didn't the hint after you wanted to hack a server make sense to you ? ?

It's not what we do.

Another Topic Closed.