SYSVOL & NETLOGON shares

My K-12 student users can SEE and EXPAND the SYSVOL & NETLOGON tree in the domain. Can they AMEND or DELETE these items if they so choose. I would rather they DO NOT have access to these shares. If I change the default permissions, will it effect my Active Directory structure?