Denying access to the file system is easy.
Youve obvlsy identified the users you want restriced (students as opposed to teachers).
open up nwadmin
create a group that contains all student user...