Normal 'shared' folders with company IT Admin?


  1. Posts : 76
    win 10
       #1

    Normal 'shared' folders with company IT Admin?


    I've just realized that all my folders (desktop, docs, downloads, music, pictures and videos) are shared with an IT admin who I believe setup my company laptop.

    Is this normal as part of the set up (I suppose it's company policy), but I mean somehow setup by default by Windows 10 if an admin creates user?

    Fortunately, I shutdown my system daily 90%+, but would the admin have been able to snoop on my files whilst I'm logged on without me knowing?

    Are there any other folders which may be affected?

    Also, is there a log which can indicate if there's been any sharing over the past year?


    Thanks
      My Computer


  2. Posts : 56,825
    Multi-boot Windows 10/11 - RTM, RP, Beta, and Insider
       #2

    TenneR said:
    I've just realized that all my folders (desktop, docs, downloads, music, pictures and videos) are shared with an IT admin who I believe setup my company laptop.

    Is this normal as part of the set up (I suppose it's company policy), but I mean somehow setup by default by Windows 10 if an admin creates user?

    Fortunately, I shutdown my system daily 90%+, but would the admin have been able to snoop on my files whilst I'm logged on without me knowing?

    Are there any other folders which may be affected?

    Also, is there a log which can indicate if there's been any sharing over the past year?


    Thanks
    Is this a company owned laptop, used for company business while you are on the job? Job use only, or are you allowed to use it for personal business?
      My Computers


  3. Posts : 76
    win 10
    Thread Starter
       #3

    Hi f14tomcat - Yes, company-owned.




      My Computer


  4. Posts : 56,825
    Multi-boot Windows 10/11 - RTM, RP, Beta, and Insider
       #4

    TenneR said:
    Hi f14tomcat - Yes, company-owned.




    Any mods/changes to that laptop must be through your company IT department. Unless advised otherwise by the Tenforums site Administrators, I cannot suggest any course of action for you. I hope you understand. TC
      My Computers


  5. Posts : 76
    win 10
    Thread Starter
       #5

    f14tomcat said:
    Any mods/changes to that laptop must be through your company IT department. Unless advised otherwise by the Tenforums site Administrators, I cannot suggest any course of action for you. I hope you understand. TC
    Well no, not really.

    I understand changes to the laptop is a matter for the company but I don't understand what it has to do with Tenforums?

    All I'm seeking are opinions as to what private files could have been compromised, what other areas may be compromised and what logs there may be.

    I note that my previous system has no such shared folders - is there anything sinister here?

    Thanks.
      My Computer


  6. Posts : 56,825
    Multi-boot Windows 10/11 - RTM, RP, Beta, and Insider
       #6

    TenneR said:
    Well no, not really.

    I understand changes to the laptop is a matter for the company but I don't understand what it has to do with Tenforums?

    All I'm seeking are opinions as to what private files could have been compromised, what other areas may be compromised and what logs there may be.

    I note that my previous system has no such shared folders - is there anything sinister here?

    Thanks.
    It's not Tenforums, per se. If the company owns the laptop, they have the right to set it up anyway they want, administer it any way they want. And have access to anything they want, unless there is an agreement stating otherwise. What I am trying to say is that no outside concern, Tenforums or any other non-company entity, can tell you what your company has set up. We/I cannot advise you on matters we do have proper access to. How you are authorized to use that laptop is between you and your company. Any access to data, private or otherwise, is between you and your employer.

    Maybe an Administrator here @Brink ,could explain it in more detail, or correct my understanding.
      My Computers


  7. Posts : 5,478
    2004
       #7

    Irrespective of policy, if a folder is shared then the user or group it is shared with can access it. They will then need permission to the files within the shared folder.

    Typically in a company the domain administrators will be part of the local administrators group and therefore have admin rights to all PCs on the network. This means they can access anything on your PC.

    You can tell if someone has connected to your PC using Samba etc from the event log (Event ID 4624 will show you their IP address) but you can't tell what specific files have been accessed unless they were changed.

    For that reason you should not store personal information you consider private on a company PC.

    As @f14tomcat said whether you are supposed to have private information on your work PC is another matter and entirely between you and your employer.
      My Computer


  8. Posts : 4,224
    Windows 10
       #8

    One might also observe in this connection that anytime IT is responsible for (and sets up and administrates) a device, it can look at anything it wants to there any time it wants, unless it provides private encryption to the user of the device in question. If you wish to avoid snooping and have access to encryption for which IT doesn't have the decryption keys (often or usually it will) only then can you prevent them from looking at certain items you wish to keep private. But part of what Dick/F14Tomcat was saying is that if you want to keep stuff private, it's better acquired and kept on a private machine that belongs to you. That is true for legal reasons and also to make sure that what belongs to you stays with you: once it goes onto a company machine, most IT policies then also acquire legal ownership of the content and/or intellectual property it represents. Read your company policy for the details, please!
    HTH,
    --Ed--
      My Computers


  9. Posts : 76
    win 10
    Thread Starter
       #9

    Thanks for your comments everyone.

    I appreciate that as a company laptop, our IT department has full control and access.

    However, I haven't made clear that it's the files of a sensitive nature (rather than a personal nature) which I'm more concerned with.

    Having access to my folders (without my knowledge) bothers me though. Not having the system on 24/7 mitigates some of my concerns though.
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 14:27.
Find Us




Windows 10 Forums