Hello @SomebodyInGNV
It is not very clear what you are trying to achieve, but it seems that you want to restrict the access to the domain shared folders such as SYSVOL or Netlogon. This is never a good idea since these folders are vital for the correct domain functioning, specially when it comes to Group Policy, as example.
The minimum permissions for this shares are:
Folder permissions:
System -> Full Control
Authenticated users -> Read
Administrators -> Full control
Share permissions:
Authenticated Users -> Full Control
Administrators -> Full Control
Everyone -> Read
Hope this helps with your query,
--------
--If the reply is helpful, please Upvote and Accept as answer--