Group membership changes don't get effective until the user logs out and logs in again.

Read more at: http://communities.vmware.com/message/1503038