if user_name not in win_deny_perms:
                    if 'deny' in perms[user_name] and not perms[user_name]['deny']['inherited']:
                        if 'remove_perms' not in changes:
                            changes['remove_perms'] = {}
                        changes['remove_perms'].update({user_name: perms[user_name]})