hmmm...So NTDOC, there's no way to deny administrators modify rights whilst also being able to read the file?