GPO - MSI Application Deployment File Share Permissions

Hello-

How can I configure permissions on my MSI application deployment share so that I can deploy applications via GPO, but also deny users any access to the MFT files (or the entire share). There is sensitive information in these MFT files, and I don't want end users to access them. I know could hide$ the share, but I'd prefer to lock it down if possible.

Thank you!