Your IT dept should know how to do this as basic standard, have a word with them and they can walk You through it.
It is just access right and policys that need to be set
Suggest Read and Write no delete should be fine Admin can get arround this
jiuk