Users have all but administrative permissions.
Users have full control over the share. When a user attempts to access a file or directory through a share, both the object permissions and the share permissions for the user are examined, and the most restrictive set of permissions are applied. It should be noted that the default permissions for a share grant all users Full Control. This should be OK if you have strong file and directory permissions within the share, but you may want examine the needs of your users and allow only the appropriate level of share permissions. Click here to go to the beginning of Windows NT environments .