theory, ... if the server is sql based, or even NT based... *no idea just going off of a idea*, you could probably find the exploit on the machine using a program like NectureNt or even a good working copy of X-scan.... steal the network passwords on theyre range... cause if theyre running multipul servers theyre has to be more then 1 ip within the range. if you get the ip, then you could go for a good ol'brute force telnet attack to try and r00t and secure the network and exploit further such as stealing account databases.. or you could use a program like DamewareNT to login remotely with a forced trojan install package for remote admin... enabling you to screen dump and see theyre o/s desktop as you operate... ORRRRRRRRR.. .. you could try to brute force the MS remote access port installed into all MS products which cannot be closed even with a firewall :).. such as the old nt ports.... .. anyways, just my morning ramblings.. i havent r00ted in 2 years.. dont ask for help.. just giving my input.
account stealing is wrong, if this was just to learn more about the server side of things, more power to you, if your out to rob someone simply cause they work harder at playing and can kick your ass.. your a sad person.