Most large internet companies use the same general methods for informing users about how their data will be used. These include agreements any frequent internet user ...
I have Sharepoint 2010 Foundation setup on a W2K8R2 server. Users are in Active Directory, security groups were created (ie. CB Property Group) and appropriate members were added to security groups.