We have a number of global contacts in the system that cannot be changed by anyone under any circumstances. On the other hand, I don't want to exclude changing contacts in general.
I have the possibility to uniquely identify these contacts (they all have a checkbox that must be set to "true").
Is it possible to exclude only these selected records from modification or allow only by Admin?
You should go with Record Rules.