There are several ways to configure sharing on a network, including using Simple File Sharing, setting share permissions, and setting NTFS permissions.
Multiple permissions affect a user’s access level. When share and NTFS permissions are applied, the cumulative permissions of both are determined, and the most restrictive of those create the user’s effective permission.
A user’s group membership can determine the level of access to the computer and its files and folders. When a user is a member of multiple groups, the permissions of the groups are compared, and the least restrictive set of permissions is applied.
Local policies can restrict how users log on, what their passwords must consist of, and what they can access and change after they have logged on to the computer.
Group Policy settings can restrict the user’s desktop, Start menu, and taskbar and what the user can access and change after her or she is logged on to the computer.
When multiple Group Policy configurations exist, domain policies always override local policies.