Hi,
Franksetank, if I understand you correctly, you could just create a new network share consisting of the "media" folder, then just create your users for your friends and select the "media" folder(s) that you want to give access to. You will be prompted to authorize "read/write", "read only", or "deny". In your case since it is a sub portion / folder, you should be good to go with the "read only" for the "media" share. Since they only have access to the "media" folder, I am pretty sure that is the only thing they can see.