Sorry Chuck.... my fault I didn't commit the changes in
VB... therefore primary group wasn't the active group and the permissions from the other group superseded all settings (as expected)....
Sorry to waste your time on this... I'll throw myself on the BBQ later