My school is asking me to test their security?

I'm hardly qualified, I just ran a .bat file to give myself administrator rights, and I went and told the deans I had done so and how easy it was. Now they have taken away the ability for us to execute .bat files or access the command line. What methods are there other than keyloggers (my last resort) to get an administrators account? I'm going to work out a plan over Christmas, and continue testing over the holidays. So, any advice? Just so you know, I am not pretending that I have any skill or that I am a hacker or anything. I'm a self-confessed script-kiddie, but I give the people who actually did the work credit.