I have an active directory group. When use this group with SharePoint authentication some strange behavior is happening. When I remove user from the group, the user can still authenticate for an hour. If I run gpupdate on the domain controller, then the user would lose access immediately. It seems that there some caching involved.