Best way to control user access to files and folders.

Ongoing debate with a collegue. He says use Group Policy to control user access to files and folder e.g dumping users into an OU and set file/folder permissions that way e.g. user rights assignments.

I say use the global groups/domain local groups model and set permissions for folders and or files per group and dump users into groups you want to have permission.