NTFS on NTFS volumes only
Share Permission
Read & Execute
Read & Execute
Write, Access control lists are used to specify the permissions that users will have to resources on the network. The Write permission allows a user to modify folders and files that already exist in the environment as well as create new files and folders as required.
Files are hidden
In Windows Server 2008, access to folders over a network is controlled by both share permissions and NTFS (New Technology File System) permissions. Share permissions dictate access when users connect to the folder over the network, while NTFS permissions govern access to the files and folders on the disk itself. These two sets of permissions operate independently; for a user to access a shared folder, they must have the appropriate permissions from both sets. If either permission set denies access, the user will not be able to access the folder.
Files are hidden
The two access controls can be set up with "Authentication and Access Control. These are available in the Windows Server 2003 folders.
Authentication.
in order to gain illegitimate access to a network attackers often by -pass access control list by
Access control allows an admin to control the system or network from one central location. This level of control make administering a network much easier.
cacls