Set access permission on an application as antivirus do

Question

I am trying to set permission on an application as read/execute only, I can achieve this by using c++ windows SetSecurityDescriptorDacl() function.

But after that admin can change it by right clicking on a file

properties->security->advanced->Change Permission

But somehow antivirus prevents these charges on their application as shown in below image