Zend certified PHP/Magento developer

User right based on Local Users and Groups

Hi I’m curious what is difference when one creates new user in Windows 7/10. It’s clear when it’s user type is added to “Administrators” group. It’s clear if it belongs to “Users”. But what is this user is in both – Users and Administrators groups at once ? Is it sum of both groups – so in fact has higher right from Administrators or is it lowered to normal user by “Users” ?

Is looking at analogy with granting NTFS permission to resources – when “deny” right has higher importance than “allow” correct here ?