You can grant or deny permissions for each shared resource.
In general, it is best to set permissions using the NTFS file system or access control. The more restrictive permissions will always apply.
Shared resource permissions:
Apply only to users who gain access to the resource over the network. They do not apply to users who gain access to the resource at the computer where the resource is stored.
Apply to all files and folders within the shared resource. For this reason, shared resource permissions provide less detailed security than NTFS permissions.
Are the only way to secure network resources on FAT and FAT32 volumes, because NTFS permissions are not available on FAT or FAT32 volumes.
Specify the maximum user access allowed over the network, for users who access the resource through the share. This is in addition to the security provided by the NTFS file system.
To set permissions on a shared resource
Using Shared Folders
Open Computer Management (Local).
In the console tree, click Shares.
Where?
Computer Management
System Tools
Shared Folders
Shares
Right-click the shared resource for which you want to set permissions, and then click Properties.
On the Share Permissions tab, select the following options that you want, and then click OK:
Click Add to grant a user or group permission for a shared resource. In the Select Users, Computers, or Groups dialog box, look for or type the user, computer, or group name, and then click OK.
Click Remove to revoke access to a shared resource.
In Permissions for <group or user>, select the Allow or Deny check boxes to set individual permissions for the selected user or group.
