This is probably a stupid question.
But is there a way to deny a user access to certain folders?

At present, when I set up a new user they are given access to all of the folders on my data drive. (and all of my drives!)

With Networking you have to share a folder so that it is accessible