Well deny backup wont work then if the account is sysadmin, as if your a sysadmin even explicit denies do not take precidence.