Active Directory: How can I grant Deny access to a folder which is granted for all domain users and be able to login remotely shorter than 10 minutes?

All users on the domain get access to this shared folder "Shared" and when I give deny access to the folder to some users, their login take exactly 10 minutes via remote after the change. We are using Windows Server 2003. Please help.