....When you combine the effective NTFS permissions with the effective Share permissions the most restrictive applies...