We have a terminal server running windows 2008 with an AD. One of the users just pointed out that a user ID with very restricted access is able to look at there Search - Recently Changed Files which is provided as a default link to the users, and it shows all files from all users that have changed on the system. Double clicking on a file opens it up and thus bypasses the security in place on the system. This is a major loop hole and we need to get it closed up or shut down, either or.
Any suggestions as to how to approach this and correct it as quickly as possible?