Best
...
practises for saving Macrium Reflect backup definition
...
files
Regardless of your PC environment, leaving your backup definition files in an insecure location is bad practice. The effort required to ensure your files are secure is minimal and doesn't impede day to day usage of Macrium Reflect.
What's the problem?
Backup definition (.xml) files are used to initiate backups either interactively by using Macrium Reflect directly, or as scheduled tasks using the Windows Tasks Scheduler. If you save your backup definitions to a publicly accessible folder then these can be edited by standard users and could potentially compromise your system. In addition, it's also possible to create batch files, either MS-DOS, PowerShell or VBScript, to automatically run during your backups as described here. A restricted user with bad intentions could easily create a batch file to run with elevated privileges when a scheduled or interactive backup runs.
...
The default, and recommended, location for your backup definitions is folder folder 'C:\users\<USER NAME>\documents\reflect'. When running Reflect for the first time this location is created and defaulted when saving. See Backup Save Options for for more information on how to save your definitions.
...
To see assigned NTFS permissions right right click on any folder, select 'Properties' and and click the 'Security' tab:
...