Finally root. when i used service daemon in my kali box, it didnt work. but when i used im****** tool it worked. still dont know why 
i will be glad if someone explains me why
Hints :
User : Do classic windows enumeration, then read output line by line
User2: Enumerate disk for hidden files
Root: You see user in one group, but maybe this group also has alias . check with another command. then simple google search will lead you to attack technique.