I have an NT domain set up and a Windows 2003 Server which houses all of our shared project data. I'm having some sharing and security issues. What I want to do it pretty simple. Let's say I have a shared folder called "SFolder" (on the Win2k3 machine) and I want all domain users to be able to view, but not modify, create, delete anything. What I read is to set the "Share" permissions to give "Everyone" full control, then go into the NTFS "Security" and set "Domain Users" to the correct permissions there at the disk level. Shouldn't the most restrictive permission take precidence between the "Share" and NTFS "Security" permissions? And yes, it's an NTFS volume that the share folder resides on.