You need to go to the folders on which you need to give read only access to users and right click> open properties> go to security tab and add the group of users/ users in authorizations and select it and uncheck write and delete boxes. Make sure you select the group or user you want to modify the permissions for once you add in authorizations. You can also check propagate box if you would like to give same access to under lying folders. Thanks!