G4 and G5 running 10.5.8
login into Windows 2003 Active Directory

we are a university with 15 machines.

yesterday, the students showed me that they can view and delete things from everyone's local profile that is created on the computer.

the only local administrator account is the "macadmin" and I have allow administrators of this domain to adminstrate this computer checked. Other than that there are no other profiles besides students with basics rights.

How can I prevent this?