Wherever you have this folder

Remove inheritance on the folder.

SET ACL on the folder as shown, if you want only Active Directory admins to be able to change it then give them Modify or FULL on the folder and the file.

No, you don't want propigation, you want to specifically set it on FOLDER and FILE.

Then only AD Admins should be able to change the file.