Well you must still set ACL on the file, not just the folder.


C:\TEMP (set the folder perms)
ACL=Administrators - READ ONLY
ACL=Domain Users - READ ONLY

C:\TEMP\TEST.INI
ACL=Domain Users - READ ONLY

Then log off to reset the Administrator Token for your testing. You should no longer be able to do anything except read that file.