有什么办法，只让system32文件夹只能添加文件，不能删除文件
RT
01:30:09 File modified: SouGoo.ime
01:30:09 File modified: SouGoo.ime
01:30:09 File added: 886520.dll
01:30:09 File modified: 886520.dll
01:30:09 File modified: 886520.dll
01:30:10 File added: Del.exe
01:30:10 File modified: Del.exe
01:30:10 File modified: Del.exe
01:30:10 File added: DelFile.sys
01:30:10 File modified: DelFile.sys
01:30:11 File deleted: 886520.dll
01:30:11 File added: 886520.dll
01:30:11 File modified: 886520.dll
01:30:11 File deleted: 886520.dll
01:30:11 File modified: Del.exe
01:30:11 File deleted: Del.exe
01:30:11 File deleted: DelFile.sys
我想得到程序自动删除的886520.dll要怎么做 
求高人指点

------解决方案--------------------
SYSTEM32 “安全”里取消权限继承，然后将相应账号权限里的“删除”和“删除子文件夹及文件”选中“拒绝”不就可以了？这时可以创建新的文件写入内容，也可用对原文件进行修改，但无法删除文件，虽然可以通过清空文件内容的方式来达到变相删除的目的。