Hello all: I need to block several users from accessing web access. So I went in the set up two rules:
1. Default - Deny Everyone
2. Allow - Only people allowed to access

However, the above rules fail to block ANYONE. So did this:
1. Default - Deny Everyone
2. Allow - Only people allowed to access
3. Deny - Deny everyone except those in #2.

This works fine. Why did my first attempt fail? They seem to be very similar (logic wise that is).

Thanks, Chris.