DHCP Deny Filter

I had a question about the DHCP deny filter.  I've added a few users to the deny filter in one of our scopes in DHCP.  I see some users still in the scope with the filter profile of deny, and I see a few under the Filters > Deny.  Can I reasonably assume bot are working properly?  And with this filter, these MAC addresses can no longer authenticate to the network?

The reason I'm asking is I'm debating whether or not to block the MAC addresses on the Aironet (these are all wifi users) or to just leave the deny policy on the DHCP.