Sgt_B: They are not admins of the server box, but admins over the network. They need to retain all of the privledges of a domain admin, but not be able to modify permissions on a folder.

I will try putting them in a group and denying all privlidges to the folder, but I think that they can still modify the NTFS permissions on the folder and give themselves the right to that folder again.

The main thing I am trying to not allow is for them to take ownership of that folder.