creation of prevention policy

Hello,
 I have a need to create a prevention policy to prevent changes to the inetpub directory on the web servers. They have the agents on the servers. Can I get help on creating this policy. I will create a foilder in prevention called webservers inetpub, and apply the policy to this folder. Thanks for any help