Really wierd issue this one. I have a user whose PC I have just joined into a domain which is simply a single Windows 2008 R2 server.
All users is map to a SHARE that contains their home folders so each user should only see his/her own folder. But for this user after she logon to the domain from her PC, she is able to access all the other users home folders with full permissions!
I have checked her grouping and share+ntfs permission - all seem correct; effective permission on her account show everything is in order and that she does not have access to any folders except her own. Other users are not having this issue.
Here comes the wierd part:
If she use another PC, her access to other folders on that same SHARE are correctly restricted.
If another user logon from her PC, that user access is also correct.
But if she logon from her own PC, she get full rights to the server!
How can this be happening?