We do something similar for student home folders. The folder structure kind of looks like this:
The share path to a student's home folder would look like this:
...and so on
One hidden share that contains all graduation years for students, and under the graduation years are the AD names for each account. Share level permissions are granted full for everyone, and file level permissions are set for students and staff to only have modify permissions on the student's folder, and nothing further up the line. This prevents people from being able to crawl up the tree and enforcement is only done on the file level. Plus, only give students modify and not full. This will keep the little buggers from taking ownership and denying access to everyone else.
If you have your students organized by graduation year in AD, then you can use this script with some minor editing to set their home folders for an entire grad year at a time.
strHomeDrive = "H"
strHomePath = "\\BIG-NAS\Students$\2020\"
Set oContainer = GetObject("LDAP://OU=2020,OU=Students,OU=Your Users,DC=yourdomain,DC=com")
oContainer.Filter = Array("user")
For Each User in oContainer
User.Put "homedrive", "H"
User.Put "homedirectory", strHomePath & User.samaccountname