Security hole since account renewal - per-user setting required for access control

Since recent renewal of our central account, we have inherited the ability to remotly access the file system and command prompt of the remote machine - whilst one one hand these may be usefull featur...