I'd recommend getting "Hacking Exposed : Windows 2000". That should help you greatly, as there is an entire chapter dedicated to priveldge escalation.

Regards,

K-Line