The answer is as close as your F1 key. Either press F1 at the Desktop, or
do
Start > Help and Support and search on the phrase "user groups." It is
pretty well explained.
In order to restrict access to specific folder, those folders *must* be
on an NTFS partition, however. I assume this is the case on your system.