Talk about dancing about architecture!

I got a colleague who wants to know how to correctly allocate shares/permissions on an NT server (4.0, sp6a, and in talking to her I find I know how to do it (not saying my way is correct or only way) but I find it really difficult to explain to her.

Anyone know a good site for a beginner to get the hang of NTFS shares/permissions, on a network? I ain't got the time to research, although I know tech-net has some pages, but they mainly assume knowledge already there. She is doing this as self-development, not an Nt (or other) techie, so I can't fit into an in-house programme

Thanks all.