Hi.
If you want to protect folders from user changes, you can try to use Virtual Private Accounts.
From
http://icoresoftware.com/:
iCore Computer 3-in-1 allows you to create multiple Virtual Private Accounts (VPAs).
Each VPA is user account that is associated with own isolated virtual machine.
All changes (documents files, software installation/uninstallation, even virus infections) remain contained in this VPA.
It's FREE.
Edit.
I just read your other messages and I think thank that iCore can help you, but you need other solutions.