How to restrict access to a directory for the admin user, but leave full access for the "Administrator" user?

Question

System administration

Good afternoon! There is a Google Drive directory on the PC , into which the program downloads files as needed. I would like to change the access of the user with administrator rights to this directory to "read only", and run the program from google drive as the user "Administrator" so that it can safely synchronize files.
The goal is to protect the directory from accidental tampering by the main user. How to do it?

Answer 1

Assign the owner specifically to the Administrator user and users - read-only permission and a ban on anything. Prohibitions take precedence.
But if you prohibit recording, then new files will not be created, only through a program launched from the Administrator. But through it it will also be possible to delete ... so, as you can see, you can not protect much by giving access at all.
Easier - use shadow copies, then any "damage" is treated in a couple of minutes. This sometimes happens to me, and if it weren't for the shadow copies - a week's work down the drain.