Excluding remote Homedrive from command search path

[Guest zWaR]

Hi,

 

at our organisation, we are using a remote homedrive on client machines (OS

is Windows XP). This drive is actually a folder on the FileServer on which

also some confident information reside. Since the homefolder is in the

command search path this means it is accessible to the system what is in

general a bad idea and is searched everytime a command from command prompt

(or run window) is issued, even before the %SystemRoot%/system32/ folder is

searched. I know the folder on the FileServer is protected with user and

group rights, but anyway I fear that this access is enought to let somebody

gain access to the confident material.

 

I have 2 questions regarding this issue:

1. Are my security considerations legitimate or am I too paranoic?

2. How can I prevent the homedrive from beeing searched for commands?

 

Cheers,

zWaR