we have 2 shares, one for home files (my documents of each
user gets mapped here)
the other is shared, there are folder by department w/
permissions set to only that department, if there are any special
projects that involve multiple departments, i create a special
folder for the project and only give access to those that need it,
there is also a public folder that has no premissions on it, this is
used for sharing general files
finally i have a public read only, only management has access to
this, this directory is mapped to our intranet and is used for
forms and newsletters (kept in pdf, generally)