AFAIK, the Win32 API doesn't prevent multiple entries from being created with the same combination of values. The Security Editor GUI though will collapse entries. Since these are low level objects, I'd prefer to leave "policy" decisions to users of this class.