Thank you very much for your feedback @tabacci 
I also walked directly to drno home folder, but since we had a thousand users I wanted to check if there was something in their folders, didnât help much since all of them were empty.
And yeah, the -t âbashâ in ssh does the same thing as executing bash once youâre inside. In some configurations youâre not allowed to type bash or /bin/bash inside and the only way is using -t, but here both ways work to escape the restricted shell.