Best Way to Revoke New Discussion Privileges

Groups add permissions, not remove them. If a user is a member of a group that has a permission to do something, then they have that permission.

If group A has read only permission in a category and group B has create topic permission, any member of group B will have create permission regardless of other groups they may be a member of.