How to isolate users

Hi,I’m asking about a easiest solution how to isolate network users on LAN just to prevent accessing each other computer’s shared folders anf files. I would not have access to client computers and their settings so I need to isolate them on some active item in the network. Do I need some manageable switch or firewall or what particular functions do I need to set on these? Can anybody help me just with a few hints. Thanks