I have an sbs 2003 system that has roaming profiles configured.
It has recently come to light that when a domain user logs on to a particular computer, they can browse into the C drive, find the user folder of another user on the domain, and browse through their data – desktop, documents etc.
I understand the data is on that computer because roaming profiles has left a copy of it there from when the user in question once logged on to that computer.
But I don’t understand how or why it is available to another user – when I configured the same scenario in a test environment, the local profile data was not accessible by other users, default permissions seemed to be owner, system and administrators.
Does anyone have any suggestions as to how this could have occurred?