2000 Server Permissions

Much really depends on how users will be accessing the share and what your security requirements are. If some of your shared folders fall under other shared folders, you may need to do things differently

If you set the share permissions to "Everyone - Full Control" and manage access rights only using NTFS permissions (under the Security tab), you could end up with undesirable results.

When dealing with only NTFS access permissions, when multiple sets of permissions may apply, the least restrictive takes precedence (i.e. Mary is a member of the Administrative and Engineering Groups. The Engineering group has only Read access to a group of files. The Administrative group has Full Control over the same set of files. Mary will Full Control base on her membership in the Administrative group). An explicit Deny takes precedence over all other permissions.

When reconciling Share permissions with NTFS permissions, the most restrictive permissions take precedence.

Hope this helps.

Tim Walsh wrote a good answer to this, but I have to make a few comments.

When setting up permissions on a shared folder, I NEVER give the Everyone group any rights. I always Remove Everyone.
I set the Sharing permissions to Authenticated Users - Full Control.
I then go to the Security tab and then add the users/groups that need access, and I assign the type of rights they need.

It is natural to want to set both Sharing and Security permissions to be the same. If BOB needs read and write access to a shared folder, most people give BOB Change rights, and then on the Security tab, you give BOB Read and Write.

So, I suggest you set up the Sharing tab for Authenticated Users - Full Control, and then manage the permissions on the Security tab. This way, you are only doing the permissions one time. There is no need to do them twice on each shared folder.

2 simple facts to consider, without a lot of explaining.

Local File and Folder security permissions take presidence over share permissions, always.

If you Give a Accounting user in the accounting user group READ-ONLY permissions on a folder,but share it as Everyone-Full Access, This user still only has READ-ONLY rights.

Paul