NTFS and share permitions are all you need... it is simple:
1. for folders make read and execute premitions for all users (you can leave full control for admins and system)
2. for files in those folders you can play arround with a lot of combinations.

I think that you can find a lot of details and scenarios in Windows NT help... and you can always try support.microsoft.com ... or their Technet... or google... or whatever...

I'm getting tired.. time to go home I guess....