I am a complete beginner with server 2012 and I'm trying to give a test user permission to access ENGINEERING shared folder, but not ACCOUNTS shared folder. I also want all users to be able to have complete admin control over their own machines (to install software etc). Their machines are joined onto a domain controller. The problem is I can only seem to allow them to install software if they're setup as admin on the domain controller, but I need to restrict what folders they can access. Hope that makes sense? Any help appreciated!