I have this exact same problem! I currently have students that browse each other home drives and add/delete stuff. My predecessor wasn't a fan of using the Administrator account either, so I get loads of Access is denied messages whenever I tried to alter anything. My way round it is to setup a new domain in the summer!