s4:group policies - add the domain controller group policy