This property specifies the deny-only SIDs that will be added to the access token, if SecurityLimitFlags is Filter Tokens. ...