how can i give enough rights to allow an administrator to create new users ect in nw admin but deny them access to everyone’s files on the network?