I've been asked to secretly share a staff member's My Documents folder on her XP Pro workstation with another staff member.
I'm wondering if this is technically possible (I'm the system/network administrator so I can pretty much go anywhere, do anything). I need to share the folder with one other staff member. Again, secretly.
My thought on whether it's the Right Thing To Do or not is that there really is no guarantee of confidentiality on a work machine. Right?
As a side note I think the situation leading to this is more of a people problem better solved with a people solution rather than a technical solution.
Disregarding the morals (as this is a technical site!) the way to do this would be to create it with a share name and a $ at the end of the share name (which would hide it).
This is more of an ethical issue rather then technical issue. The question you need to ask yourself is, are you violating company's policy by "secretly" sharing someone's document with another staff member. It's often normal for someone in management position to ask for this type of request. But it's quite another when it's a colleague in the same level. Personally, I think you cross the boundary of your job responsibility and not to mention company's policy. I'm sure most companies are frown upon this type of practice.
Going back to the technical question you asked, you can share a folder on a network with restricted access. Other people can see the folder is there but they will not have access to it unless specified. Yes it's possible.
Depending on the contract you have with employees, it can be a risky area to go spying on them. Generally speaking, if you suspect them of wrong doing then it could be legally permissable; and if it is exclusively on work related activity, then it is usually fine.
Hidden/administrative shares are easy enough to create, they have a
$
on the end of their name. See this knowledgebase article on the subject.The expectation of privacy on work equipment is something that varies from country to country, and even locality to locality. In the US there is large precedent for any activity on work-supplied equipment being fully and completely auditable. That's not always the case elsewhere. In Europe, where worker protections tend to be more robust, I wouldn't be as confident as I would be in, say, Alabama.
As others have pointed out, such shares are easy to create. However, they're also easy to discover if someone knows how to look for them.