The folder apparently has no restrictions. If it did, the user wouldn't be able to use Windows Explorer to delete files. Word has a 'Mark as Final' option that should restrict document access to read-only but that can't be considered a security feature. There are dozens of ways to get around that.

I realize that Word can't save changes to a read only document but read only can't be considered a security feature. In the case of the 'boilerplate' documents (the ones that were deleted) the user never has interactive access to the document from within the VFP application so editing and saving are not options. But, users can still access the documents outside the application via Word and I'd like to prevent that for all but administrators.

In the case of the 2 custom documents, users do get interactive access to a copy of the original and may save the copy. I'd like to restrict saving to the user's personal directory but a prior discussion here on UT has indicated that's not possible.