As the name suggests, the Deny File Access action prevents applications from reading or writing (or both) to certain directories or to Microsoft Office Documents.
You can choose from two actions:
Deny Read/Write Access to Microsoft Office Documents - This action can be used to deny read and write access to Microsoft Office Documents.
Deny Write Access to Executable Files - This action can be used to deny write access to common executable files.