I think the logic behind granting the home folder full control is that the user will be the only one creating things there.. and generally when you create something, you have full control automatically.
I'm just looking at a file I created in a "public" share where I have Modify rights.. I have full control on the file I just created. Thus, removing the rights on the home folders as you suggest seems counter-productive to some degree.
Of course, granting Full Control to any user/group other than Administrators outside of the home folder is "strictly Verboten!"
Glenn
_________________________
Actually I
am a Rocket Scientist!
