We can authenticate users to access CIFS shares by AD. However, are there any ways to allow a certain of serers to access shares? Or if there are such needs at all?
You can use export policies:
It's usually disabled by default for CIFS:
You may also want to look into Dynamic Access Control:
you can then apply AD policies with an AND operator such as a particular user has to also be on a particular machine to access a share.