What is the difference between using “Deny” in any of the NTFS permissions as opposed not selecting “Allow” ??