DFS Issues

[Aen]

So here goes my problems. We have numerous DFS servers. Somehow some users are able to add new folders directly into the middle of DFS virtual paths. They are able to create them where they should not be able to. They do not create it by the DFS console and create a DFS link that way. Nor do they create a folder in a real folder. For example:

\\domain\data\Operations\Projects\Project1

\\Virtual\Virtual\Virtual\Virtual\RealFolder

They are able to create a folder \\domain\data\operations\NewFolder\ They just right click in the DFS path and create a new folder and give it permissions.

Where do i go to stop this? I thought no one could do that? I found the data randomly through at some of the DFSroot folders.

I checked the DFSroots and DFS Admins is part of it that has modify access. All users by a few domain admins are in that group.

What else do you guys think i should look?