Weblink
 
 

1. Click the policy, and then click Edit.
2. Right-click Restricted Groups (under Computer Configuration\Windows Settings\Security Settings\Restricted Groups), and then click Add Group.
3. Click Browse. Focused on the local computer, click the group to which you want your global group to be a member (in this case, the "Administrators" group), click ADD, and then click OK. You are returned to the group policy and you see the administrators group listed in the Restricted Groups window.
4. Right-click the group, and then click Properties.
   1. To the right of the top box labeled  "Members of this Group"T click ADD
   2. Type in "<domain name>\Domain Users" click OK  (Note: It would not let me browse for domain users).
   3. Then click ADD again, click Browse.
   4. Change the location to the <local computer>
   5. Search and add for "Athenticated Users"
   6. Note: There is no need to add anything to the bottum box labeled "This group is a member of".
5. You can now close out of the group policy editor.
6. On the local computer, at a command prompt, type gpupdate /force or (if win2k) secedit /refreshpolicy machine_policy /enforce, and then press ENTER.