Our main file server (Windows 2008 R2) has a couple of folders which are locked down using NTFS permissions to specific HR users and Domain Admins - this has been in place for several months. Despite this, one standard user on our domain can access the folders completely via their network share. I've checked both the share and NTFS permissions for these folders/files and this user is not listed and definitely should not be able to view them.
I've double-checked the permissions for this user in AD and they are definitely not a domain admin or have any specific access beyond basic user groups.
I'm at a loss to why they can view this. I have double-checked that they are logged in as themselves on their workstation, their workstation itself doesn't have any extra permissions in AD and they are not administrators on the file server itself.
Anyone seen anything like this before?
Ben Hart