We use groups on every folder to track permissions easier. For example, if a user needs access to the Marketing folder we would make them a member of the group Marketing. Once that gets completed, and try to access the folder they still get access denied until they log off and log back on then they can access the folder. Once you are granted access to the folder, arent you supposed to have access instantly instead of having to log off and log back on to refresh everything???

Your token has to be updated with your group permissions and their resulting policies. Just curious, did you give a local group permissions to the folder, make a global group with the users in it, and add the global group into the local? "How many squirrels had to die to make you look fly?!"

"Once you are granted access to the folder, arent you supposed to have access instantly instead of having to log off and log back on to refresh everything???". No. The user needs to log off and back on in order for the changed permissions to take effect. Life is more painless for those who are brainless.