I'm gonna have to disagree with this one. There are tons of great, battle-tested backup tools out there -- rolling your own solution seems to just be asking for something to go wrong.
This isn't backup. It's user profile element duplication on the same machine. As long as they are not admins or power users on the system then they can't do much damage outside of their profiles.
Backup is another matter entirely.