Unauthorised access to desktop

[TechSupp]

Not sure which section this should be under but...we run a redirected desktop here (w7 on server 2008 r2) done over he summer and set so that no one apart from a system admin could add files or delete files from their desktop so I could keep things all looking neat etc. now this was checked under various logins, staff and pupil and just as we wanted access refused when that operation was tried yet.....I came in yesterday morning and lo and behold someone had managed to save a PowerPoint to the desktop! Security settings were checked and access to desktop checked and all ok so any idea how this could have been done? I don't know who created the file ( or could I have checked via its ownership?) and no one has complained yet so will see. I think it was a file for an assembly so maybe a member of staff but don't know how they would have had permission as none are in the administrator group as we checked, yours sincerely, puzzled of Doncaster!

[MordyT]

Check ownership. Double check that person doesn't have access. Reset their password and login and try to duplicate. If you can do, check their permissions again. If you can't, throw hands up in the air...

[Admiral208]

check which security groups should have permission to write to the folder and then check to see which users are in those groups.

 

ive seen it before where users get added to wrong groups like domain admins. its easily done...