I agree with Les. Users should only have Modify rights.

Leaving NTFS permissions alone I would NOT agree with myself, but to each his own.

As for setting Share permissions, yes "Best Practice" is to set them appropriately, never know when someone might come along and modify the NTFS permissions and - ooops someone has access that shouldn't have access.