Permissions may be assigned at the file (NTFS) and share level, and may either allow or deny access rights.
By default, the Everyone group has only the Read permission on a new share. Share permissions include Read, Change, and Full Control.
The net share command may be used to reate a new share from the command line. Other common net services include net accounts , net config , net file , net help , net send , net session , net start , net stop , and net use .
NTFS permissions are only available on NTFS-formatted volumes . NTFS permissions include Read, Write, Read & Execute, Modify, Full Control, and Special.
When calculating final permissions: all explicit and inherited share permissions are combined to provide the least restrictive combination (a Deny wins if present), all explicit and inherited NTFS permissions are combined to provide the least restrictive combination (a Deny wins if present), and the resulting NTFS and share permissions are combined and the most restrictive combination wins.