Ah man I have so many stories about my high school schenanigains.
Every student had a folder named as their student ID on the smb network, all in one big folder. I created a folder there with a fake student ID just 1 above mine, so all I had to do was change my path from /students/1234 to 1235 and bam - I'm in my alt account. I had cracked copies of halo, starbound, gmod, powder toy, Terraria, Minecraft... all sorts of goodies!
Eventually I found that since this phony user folder 1235 wasn't tied to a domain user, its read/write permissions weren't locked down - so anybody on the network could access or add to the folder, so I shared it around with friends and it grew quickly! Didn't realize that meant deleting stuff, too; some kids just had chaos in mind, and would randomly delete shit because hAHa I DelEted the FolDer!!1! Ah, high school.
So eventually I got a system down where I'd keep backups elsewhere, and I'd refresh the war-torn main folder every so often, or switch to a new bogus ID to keep it among my friends - but better yet, if I was lucky enough to catch it disappearing in realtime, I'd often throw it right back up with something flashy and new in there, like a new CoD game or something, with surface level 'shortcut' links to the game executable right at the top of the directory, complete with a convincing custom icon. Instead of running a game or something, though, it instead ran scripts that either identified the leak (CD tray eject in a library computer bay? Immediate audio queue locating the assholes), or in later stages when patching the leak still failed, I'd bait them into a script that'd nuke their PC somehow π
my personal favorite, I built what I called the 'tree bomb' - a recursive .batch file that launches itself in another window, then runs "tree C:". Within around a second you'd go from a functional PC to a screen filled with terminals spitting out a representation of your hard drive's contents π€£ in retrospect, I made a malware! π