Restrict manufacturing share folder access by office or shop floor role using Active Directory groups and NTFS permissions.