Здравствуйте,
Настроил samba файл сервер на авторизацию через AD
в доступ дал папку, и права на нее дал для группы, из AD добавил пользователя  в эту группу все ок, папка появилась в доступе, после убрал пользователя из группы, папка осталась в доступеу пользователя. Как решить.    

[global]
        workgroup = STSCOMPANY
        password server = *
        realm = STS.LOCAL
        security = ads
        idmap uid = 10000-20000
        idmap gid = 10000-20000
        template homedir = /var/usb2/STSCOMPANY/%U
        template shell = /bin/bash
        winbind use default domain = true
        winbind offline logon = false
        netbios name = storage
        server string = Samba Server 3.0
        auth methods = winbind
        encrypt passwords = yes
        printcap name = /etc/printcap
        load printers = yes
        printing = cups
        log file = /var/log/samba/%m.log
        max log size = 0
        socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
        local master = no
        domain master = no
        preferred master = no
        dns proxy = no
        smb ports = 445
        time server = Yes
        winbind refresh tickets = yes
        winbind enum groups = yes
        winbind enum users = yes
        log level = 1
        unix charset = UTF-8
        dos charset = cp866
        disable spoolss = Yes
        show add printer wizard = No
        case sensitive = no
        default case = lower
        preserve case = yes
        interfaces = eth0
        ldap ssl = no
        username map = /etc/samba/smbusers
        obey pam restrictions = yes

#============================ Share Definitions ==============================

[homes]
comment = Home Directories
valid users = %S, %D%w%S
browseable = No
read only = No
inherit acls = Yes

[Install]
        comment = install
        path = /var/usb2
        guest ok = yes
        writeable = yes
        write list = @"sts.local\Domain Admins"
        create mask = 0644

[ДИТ]
        comment = install
        path = /var/usb2/test
        writeable = yes
        write list = @"sts.local\Директор ДИТ"
        browseable = yes
        create mask = 0644