r9956: Ensure accounts with the SeAddUsersPrivilege can modify domain and local group...