I think in most cases ransomware starts to encrypt network drives. You are automatically authenticated with your domain account. Rigid rights management would

I think in most cases ransomware starts to encrypt network drives. You are automatically authenticated with your domain account. Rigid rights management would help, but security competes with ease of access.