Zen 6.5 on NW6 SP4.

I have 2 policies. One for the users that is associated to the container and
one for the admins that is associated directly to their user account. The
admin accounts live in the container though. When I look at their effective
policies it shows both the admin policy and the user policy. Which one takes