I have not read through all your code yet, but at first glance, I seem to understand that your users have at least write access to the \\server\users share. I think this is not good. I think user directories should be created by an admin. IMHO \\server\users should be read-only for users on NTFS. From \\server\users\%username%, new NTFS security should be set to allow the user exclusive modify or full access.