After some days keeping an eye on this, I see that some users can access the shared folders (the AV).
So I re-check the share folder and change this:
Some users just keep grabbing some folders, so I fight it changing the folder name (non work), moving the folder inside another folder (not work), so, finally I move the files from the folder to a new folder on the shared one, the AV don’t see the files and let it go. Then I delete the empty folders, recreate the needed one and move the files again. The user/AV is tamed for now. Let’s see in the next days.
And yes the shared folder is hidden, but as we know the name of the shared folder we can use it and install our programs… isn’t a problem, we are the ‘demi-gods’ of IT here we need to know that shared folder names.
Continue here to report my findings.