Check the rights again.

The User (@userID) + Domain admins has "full control" on NTFS rights

I think this i legal

\erik