get ownership remotely

Hi I am a security Officer and I have a nasty user set the ownership of c$,d$ and e$ so I have to see what he has on his disks cause he may have hacking software .
can anyone tell me how to see them in a hidden share ?
by the way he has windows2000 installed on his m/c .
thanx everyone