In ConfigMgr 2012 you can have include collections to include members and you can have exclude collections to exclude members. Makes sense, right? But what happens if a collection member (could be a computer or a user) exists in both collections, the include and the exclude? Which one takes priority? The exclude would win, so the collection member would not be returned in the collection results.