Will be an account that won't function. You could mark these READONLY to that account using NTFS PERMISSIONS. Here's a primer on permissions and ownership for NTFS.
It also answers the question for those that don't want to learn about this.
how can lock the "program file" folder with password? or make it unaccessable by the limited account?