You can add shares with rights for your groups.

At first you need to create directorys on your AD named “MA-share” and so on. To enable those, rightclick → options and open tab “enabling”. Now open “advanced enabling” and check “enable this directory”. The share name can be MA-share. You can find this share later under that name in the network. After enabling you have to set rights. Rightclick → options → security to get to the window. You can add the group for the directory now.

⇒Continue with GPO