Here's my situation: I am working with a particular group in HR that should be the only group to read, write and modify a specific field in a template. Members of that HR group also belongs to other smaller HR AD groups. If I use the deny access right to deny access to that field to all AD groups except that HR group, it won't work because of their involvement in other groups, correct? I've been testing this and can't come up with a different solution.
The particular HR group needs this field to name entries as they come in. Other groups do not need to even see this field.