Changes you make to local or Active Directory groups do not get reflected in TFS immediately. Instead, TFS will synchronize those groups regularly (by default every hour). Known workarounds : You can re-add the security group in TFS, this will trigger a identity synchronization. In TFS 2005/2008...