Managers Computers : Only PC owner have access rights to this computer , and all files on this computer are protected from unauthorized use by the server's security policy

Store Computers : same policy as the accountants computers
Staff Computers : access rights are defined on need basis also users can b prohibited from install and running non work programs that can cause in distract them

Accountants Computers : General Manager and Accounting Manager has full access rights to accounting folders and printers on this computers , Accountants can access only accounting files and programs , other users has no access rights to these computers .

Directory Server : it's the domain controller for the network , it holds the user accounts and passwords and checks it when users run their computers and logon to the network objects also checks for user rights when they access network resources (files ,folders ,printers ...) and grant or deny user from using them according to their rights and permissions  , this computer should be out of reach of the users .

Secretary Computer : this computer is usually used to distribute faxes and share printers , users are allowed to access fax folders or other folders as the work needs , users can't delete or modify files on this computer .