Deny File Access

As the name suggests, the Deny File Access action prevents applications from reading or writing (or both) to certain directories or to Microsoft Office Documents. 

You can choose from two actions:

Deny Read/Write Access to Microsoft Office Documents - This action can be used to deny read and write access to Microsoft Office Documents.

Deny Write Access to Executable Files - This action can be used to deny write access to common executable files.