Well the NETLOGON share should not allow even your Admin account to create files. i.e it should be READ ONLY for all accounts.