"If you're not familiar with how NT ACLs work, here's how you can break file permission inheritance. First of all, let's make sure Windows will let you access the ACL dialog from the GUI:
- In explorer, go to Tools > Folder Options. Then, go to View > Advanced Settings and uncheck "Use simple file sharing". Hit OK.
Now, let's change the permissions for WgaLogon:
- In the Address bar, type (without quotes) "%WinDir%\system32" and hit enter.
- Scroll down to WgaLogon.dll, right click on it, pick Properties. Go to Security.
- Hit the Advanced button, uncheck the Inherit box at the bottom, hit the Copy button, then hit OK.
Now we have a local copy of the ACL which we can modify.
- Go through each listed user/group and remove the "Read & Execute" permission for that file, leaving the "Read" permission as-is.
- Hit OK to apply the permission changes and close the file properties dialog. Restart the machine.
You can now turn "Use simple file sharing" back on, if you want."