New
#11
I think NTFS always evaluates deny selection first and therefore will take precedence over any allow.
You can test against specific users/groups by drilling a little deeper into the dialogs (Advanced button) to see how NTFS will evaluate your selections.