SQLAgentCmdExec rights to User's Shared Folders-legit??

[Richard Darling]

Going through the "nimda" checklist I checked the shares on folders. I had never noticed it before, but I see that the SQLAgentCmdExec has Read permissions on all users' home directories in Users Shared Folders; and Full Control for the Administrator account.

We only have one app that uses DQL7 and they said that they didn't put those permissions in place, but that they may be part of the SBS installation.

The thing that bothers me is that I don't remember seeing them before.

I have the latest version Trend Office installed, and scanned the server...no viruses found...any ideas?

Richard Darling