How can l tighten folder security

I have a problem in NT where users can copy or drag a directory, to which they do not have access into their user area and then open that directory and it’s contents.
Is this a security hole in NT?
Does anyone know how to fix it, a work around, ora 3rd party product that will help me.