Creating a "closed network" for Media Production

We have a requirement to setup a new closed network which will contain about 20 machines, Servers/PC's/Macs. We were initially thinking of domain joining the machines Servers/PC's by using ACL's for access but not sure whether that is the correct way for this type of network. Really looking for any advice on this type of setup.

Thanks