At crawl time document ACLs are stored. If you add users to MOSS individually a crawl is required for any updated ACLs to be reflected in the search results. I you add users to an existing AD group a new crawl is not required.
Keep in mind, however, that ACL changes are stored during incremental crawls.