OS 6 - RN516 - use SSH to edit SMB / Windows permissions?

I think I might have figured out the problem. In the SMB tab I had everyone set to read only. This, apparently, overrides the windows-set permissions. Also, changing permissions on the share level ruins inheritance. So I reset permissions to rw/rw/r on the security page, and put "everyone" as read/write on the SMB tab. The security tab prevents people from taking ownership (which is what I was trying to do on the SMB tab). The SMB must be wide open or have explicit read/write assigned to anyone who will need read/write lower down.

Consequently, these are the default settings for the SMB and Security tabs. But you must login as the domain admin to set basic permissions at the top level *subfolder* under the share for domain admins or something of that sort in order to have quality control over the content and permissions.