Create the shares first then user. You have and option when you create a share users to config access rights.
Depending on your router (firewall) and ISP's some ftp client does not work. In most cases IE does.
Security will drive you nuts, when you you start testing it.
