@echo off

:: create junction
mklink /J "%~2" "%~1"

:: set acl
icacls "%~2" /deny Mindenki:(RD) /L
icacls "%~2" /setowner SYSTEM /L

:: set attributes
attrib +S +H +I "%~2" /L