If this is in the wrong area please let me know.

We have a nw6.5 sp3 server as our ftp server. When a ftp user connects they connect to their default directory just fine. However, the boss was trying a ID out for whatever reason and found that if they backup the volume they can see NDPS, Login, Public, etc.

Now, all they can do is R/F(with the exception of the \ndps\xfer directory which they have full access to) but the boss is paranoid. Is there a simple way to change this so all they get are those folders that explicitly given to them?