My though:
1.Develop a backgroup program to stakeout the user operation.It would hint a message that can't access if user connect the file or folder that had beed set unvisitable.But this method can't be a complete solution.
2.Maybe we can modify the register file to prevant our file or folder just like we can't delete the OS system file.But I don't know how to do.I also hope other guys can tell me how to do.This is just a though.
Behard,
It is use another method to realize.