You might try the Computer Configuration, Windows Settings, Security
Settings, Restricted Groups.
I suggest studying http://support.microsoft.com/?id=810076 first. This
discusses an update to some Windows versions to allow groups to be ADDED to
local groups using Restricted Groups as opposed to REPLACING existing local
group membership.