Not on Windows they don't.. Deny always overrides any access. I have done hundreds of tests as part of a compliance project on various Windows versions and its rock solid.
You call "You do not have permission to access this (file/folder/drive). Click here to permanently get full access rights" 'rock solid'?
I've performed thousands of test, and found the Windows security model... Actually, no that's not true, I've never found the Windows security model because it does not exist!