Dissallow access to a folder structure to all but one person

I need to be able to create a set of folders on a server and restrict read and write access to all but the currently logged-in user (and admins) thru a Batch/Command file script. 

I see that "subinacl" can be used to set "ownership" to a folder and "icacls" can be used to set permissions. I have the following questions:

1) Do I need to set ownership or if the folder structure is created in a batch file run under the current user's id, will they be owner already? 

2) What users need to have their permissions changed so they can't read and write? (i.e., can I just set the "Users" account to no access?)

thanks,

Bert Sirkin