A customer relayed to us the issue that one of his users (user B) discovered sensitive documents in his recycle bin, which another user (user A) apparently deleted on a mapped network drive.
Now, I am under the impression that this is not possible. Maybe getting files which one deletes himself to show up in the local recycle bin could be realized with symbolic links but that seems a little far fetched. And there's the issue that user B does not have NTFS permissions to access the folder the respective files are stored in.
As the rogue documents discovered in this local recycle bin are of a sensitive nature and the company's director is sure he has seen this with his own eyes, "this is not possible" is not an acceptable answer for our client.
Are there any technical solutions to reproduce this issue/ is it possible to configure Windows to behave this way? If not, how would I go about proving that this is not a technical issue but rather that these files were handled incorrectly?
Server is a Windows Small Business Server 2008 Client is a Windows 7 Workstation.
They used to share the PC with a different account.