Orlando,
Siempre pondera más el restrictivo, palabra de Microsoft, amén!
When a user has contradictory permissions, Windows NT always uses the most restrictive permission. For example, suppose a user is a member of one group that has read-only access to a resource and is a member of another group that has full control over
the same resource. Since read-only is the more restrictive permission, that permission would apply. You should also keep in mind in such situations that a specific denial (assigning the No Access permission) overrides any other permissions you might have given
the user. For example, suppose a user is a member of a group with full control to a resource and is a member of another group that's been given the No Access permission to the same resource. In such a situation, the user won't be able to access the resource,
because No Access overrides Full Control.
Suerte
Check my qualifications here.
Check my blog here.
