On our network, I create Sahres and grant domain users full control at the share level and NT Groups at the NTFS level.
However I am now being forced to change these to Groups at the Share and Everyone at the NTFS.
I know this is wrong, but I do not know why it is wrong and therefore can not stand my corner and argue to keep it how it is.
Could someone please tell me!!!!

What exactly is it that you want to argue? That users should have Full Control of shares and that the "Everyone" group should have Full Control of the File Permissions? I don't agree with that at all.

If I'm misunderstanding what you need, perhaps it would help if you give a little more detail.

No No No!
Sorry didn't make myself clear :-p

The Standard way to create a Share is that you grant Domain Users permission to the Share at the share level and a global Group to the NTFS permissions.

This then means that anybody who is a domain user can map to the Share but only members of the group can access.

I am not sure why this is the standard way to do this, so Microsoft say it is, so everyone says it it is, but why??

What difference does putting the global groups in the Share level permissions and Domain users in the NTFS make?

I don't know what Microsoft recommends as far as this, but where I work, if a user needs access to files on a server, and the files will be shared by more than one person, then we use Groups. File permission management is much more efficient using Groups, rather than adding permissions by the user. As for file permissions on the server, Domain Admins have full control and the User Groups have modify if they need full control of the files. We do NOT give users "Full Control" as we do not want them setting/changing/adding permissions to either the shares or the file permissions.

I don't know if that helps you or not...

You are basically saying exactly the way we use to do it - and the correct way.
We never give domain users full control to the NTFS permissions that would be pointless having security but given them full control in the Share permssions NOT the NTFS doesn't allow them to do anything apart from map to the share.

OK JIm...here's the thing...
ITS UGLR
Users go into global groups go into local groups get access to rescources...NEVER PUT A GLOBAL GROUP IN A PERMISSIONS BOX!!!
And, here's the thing...when having a share and ntfs permissions...the more restrictive permissions apply...
so if the LOCAL GROUP (i'm pushign this, NEVEr ever assign global groups permissions)
if the LOCAL GROUP group1, has the SHARE permission of Full control, and the NTFS permission of Read...then READ is the effective permission because more restrive permissions apply.
Oh yah...never assign the everyone group any permissions...this built in group means administrators, and guest accounts and EVERY SINGLE USER on the computer...if you give read only access to the everyone group, and your the administrator and you need to change something like delete a file...NT will give you the big "FU" because guess what, admin is part of the everybody group, and the everybody group has read permission. And by the way, Microsoft does NOT say to add global groups to a NTFS share...that is very very wrong...i'm sorry...but you can look it up @ support.microsoft.com...ITS THE UGLR way..or the highway...Be more leniant with the Share permissions, then tighten the noose on the NTFS permissions...