I forgot where I learned this (perhaps the TFS Admin guide) but ... this is a good little tip... When you add users to groups in AD and those groups are present in the Team Foundation Server Security groups it can take up to 60 minutes for the policy
Read More...