Everyone/Full Control permission allows to change initiall boot files regardless of individual file permissions.
vulners.com/securityvulns/securityvulns:doc:3323
vulners.com/securityvulns/securityvulns:doc:3698