Snapshot different visibility , possible solutions?

Hi guys,

I have a question about the snapshots permissions on ISILON

Basically I have a common SMB environments with 2 big directories shared, in one we have all the user's home in the other one we have only the group folders.

On both, the security and the ACL is managed by windows AD.

I set a snapshot policy on both and  everything works fine.

By the VSS agent on windows all the users are able to  recovery their  folders by them self, but I don't want to leave them the same possibility on the group share folders.

I think this is a common problem , has someone some suggestion?

Thank you in advance.