Each user account of a Windows operating system has specific permissions assigned to it. This determines which files can be accessed or modified among other things. Administrators can modify those permissions, to give additional rights to a user or remove rights instead. A simple example is a configuration file that you do not want users to modify in any way or form. You could remove the write permission so that users cannot modify it anymore.
Read more.