Thanks a lot for your reply, but the user is not connected!!! I mean he is in the morning group but not connected, I remove it and add it to afternoon group and now let him test his access: near half an hour pass until he receive an Access Denied message, unless I restart the Web Proxy Service, but you know that it is not a good solution, because it disconects everybody else too :-(