That appears to be pretty wild speculation at this stage, and not at all helpful.

I'm willing to be proven wrong on this, but I'm highly doubtful that the file shares that Keith accessed are open to all and sundry within MSD. It seems more likely to me that the accounts used by the kiosk computers were incorrectly configured which gave them way more rights than they needed.

If true, it would be ironic that the public had more access to MSD's internal systems than their own staff did.

Does anyone know the significance (if any) of Mountain Standard Time reference on one of the captures?

There would be no significance to this. This looks like it's just a default config file used to provision computers/servers. Same goes with the short-looking admin password - this would almost certainly just be part of the initial build process and would get locked down further along the process.

That's an incredibly sad story and I honestly don’t know how I would cope if it was my 1 year old daughter in this story.