Permissions on user profile folders

I am new to this company, and after troubleshooting a users computer I realized that she had access to all of the profile folders in our company.

I went back and looked at the permissions, and every user folder has the following permissions set:

Domain Admins – Full Control
Domain Users – Full Control
Administrators – Full Control

Now I realize that I could just go through each user folder and set permissions manually, but that wouldn’t be very efficient.

How can I set it the easy way to just give Admins and the user access to the profile folders?

Thanks,