how to stop effective permission

i bit
lost effective permission <o:p></o:p>

i have a
windows 2012 server, setup shared folder. make sure
"everyone" group removed form share permission and
"everyone" removed security tab. however, when people rdp to
server, don't have permission folder still can list and
open file command prompt. check effective permission 1 of
user doesn’t have access folder. saw similar sets of
effective permission applied domain users (read & execute, list
folder contents , read. same permission of "users"
group local server. <o:p></o:p>

so test
have removed "users" group share folder , see there
no effective permission domain users. <o:p></o:p>

so i
missing here? local "users" group equivalent domain
users? <o:p></o:p>

post permission set screenshot, many times meet simlar issue user account blong group have read premission.

Windows Server  >  Network Access Protection