If you choose to apply both shared folder and NTFS permissions to a folder, you need to consider which permissions will actually apply. For example, let’s say that you granted a user named Paul the shared folder permission Read, and the NTFS permission Full Control. When accessing this folder over the network, the more restrictive permission of the two always applies, in this case Read. However, if Paul were to log on to the system locally, only the NTFS permissions would apply, and he would be granted Full Control. Always keep this concept in mind when attempting to troubleshoot user access to shared folders.
