Originally Posted by Q
Well...well...well.... my ExamCram 70-270 (XP Install yada ya) book told me to control on a NTFS basis.
Don't make me scan my MCSE cert, of course, then I'd lose credibility.
It's the most restrictive; from a security aspect it'd be better to control it both on the NTFS level as well as the share level. Your advice was 100% accurate, NTFS would be the 'catch-all'.