I've read MCSE Windows XP Professional Training Kit, and am now reading Sybex MCSA/MCSE Windows XP Professional Study Guide, 3rd Edition (70-270). Early on in the book there is a test exam with the following question...
12. Susan is a member of the Sales and Managers groups. The Managers group has been allowed the Full Control permission to the

\DATA folder. The Sales group has been allowed the Read & Execute permission to

\DATA but has been denied the Full Control permission. What are Susan's effective rights?
1. Full Control
2. Read & Execute
3. Read
4. No permissions
Answer:
B. Susan is not allowed the Full Control permission because it was explicitly denied through her membership in the Sales group. She is allowed the Read & Execute permission. See Chapter 9 for more information.
I thought if a group was denied full control, then the user would have no access at all, I've run this past a few people who agree with me.
Can anyone clarify whether the answer above is correct?
Thanks
dave