What is a practical access-control setup for a small company?

Question

A small business asked me to improve access to its shared files and business tools. Right now, several employees use shared passwords, and access is not always removed when someone leaves. I need an approach that is realistic for a small team without introducing an expensive enterprise system.