You could probably use Group Policy, but there will be dozens of ways to get around it if someone really wants to.
If you don't want people to be able to access the files, you really want to not have them physically on the machine.
Remember that you can usually access the files via the command line, or simply typing the path.