Back to basics - NTFS and Share permissions
I know that lots here are MS certified (my aim too!) and it's with that in mind that I post the question.
I know about the principles of Share and NTFS permissions:
Share permissions are cumulative
NTFS permissions are cumulative
Share + NTFS permissions ... use the most restrictive
Deny trumps Allow
File permissions trump Folder permissions
etc., but is there any logical or numerical way of knowing exactly the order of priority? For instance, if I'm asked to combine Full Share with Read NTFS, it's easy enough to determine the answer but what about Change Share with Modify NTFS or Change Share with Write NTFS? Is it as simple as the order in which the permissions are listed on the Properties pages? If so, is Write *really* more restrictive than Read?
Finally, is there any clever trick (perhaps commandline) which will allow me to assess combined/effective permissions, rather like using RSOP or GPRESULT when dealing with Group Policies? I had a look at CACLS but that didn't seem to give me the solution that I'm looking for.