Passwörter per WMI abfragen

Ich möchte gern per WMI Abfrage von remotecomputern die passwörter der lokalen benutzer accounts auslesen,

dazu "connected" man zu den remotepcs als administrator( mit pw).
Wie ich die accounts auslese oder andere wmi services nutze(also zB pc name, hardware etc) ist mir bekannt, nur wie bekomme ich die Passwörter herraus ?

Function PC
Const intMin = 3600
WScript.StdOut.Write "Please enter the IP:"  
strComputer = WScript.StdIn.Readline
strDomain = ""    
WScript.StdOut.Write "Please enter your user name:"  
strUser = WScript.StdIn.ReadLine 
Set objPassword = CreateObject("ScriptPW.Password")  
WScript.StdOut.Write "Please enter your password:"  
strPassword = objPassword.GetPassword()
WScript.Echo vbNewLine
Set objSWbemLocator = CreateObject("WbemScripting.SWbemLocator")   
Set objWMIService = objSWbemLocator.ConnectServer(strComputer, _ 
    "root\CIMV2", _   
    strUser, _ 
    strPassword, _ 
    "MS_409", _   
    "NTLMDomain:" + strDomain)   
 
On Error Resume Next

Set colItems = objWMIService.ExecQuery("Select * from Win32_ComputerSystem",,48)  
For Each objItem In colItems
	WScript.Echo "TotalPhysicalMemory: " & objItem.TotalPhysicalMemory  
	WScript.Echo "UserName: " & objItem.UserName  
	
Next
Set colItems = objWMIService.ExecQuery("Select * from Win32_NetworkLoginProfile",,48)  
For Each objItem In colItems
WScript.Echo objItem.Password ' Das geht nicht  
Next


Set colItems = objWMIService.ExecQuery("Select * from Win32_UserAccount",,48)  
For Each objItem in colItems
	

	WScript.Echo "FullName: " & objItem.FullName  
	WScript.Echo "PW:" & objItem.  
	WScript.Echo "Name: " & objItem.Name  
	WScript.Echo "PasswordChangeable: " & objItem.Passwordvalue 'Das auch nicht  

Next

End Function