No need for GPO's, just Share permissions + AD.