Having entries only in the Deny users list and no entries in the Allow users list would result in all users being denied ...