I do not understand why you want to deep map to a share you allready mapped. You could use Windows Security to deny access to someone who is not in group Shiklolit_Group and Bezeq_Zahav_Group.
In that way, you keep S: and Z: for better occasions.