Active Directory (AD) is an excellent file and folder permissions, security, and management tool. It allows administrators to give permission to access specific folders to specific users.

One of the tools you do not want to ignore is Active Directory ... a user logging on/off or one who makes a network connection to the computer configured to audit logon events. Audit object access ...