Group Add/Remove working.

Local group membership Add/Remove working, however with
BUILTIN local system groups .NET doesn't appear to locate them as either
groups nor basic security Principals.  Still needs work to fix the test
for nested groups.  Ideally with some way to test for domain groups.


Signed-off-by: Bevan Weiss <bevan.weiss@gmail.com>

src/ext/Util/ca/scacost.h

@@ -11,6 +11,8 @@ const UINT COST_USER_ADD = 10000;
 const UINT COST_USER_DELETE = 10000;
 const UINT COST_GROUP_ADD = 10000;
 const UINT COST_GROUP_DELETE = 10000;
+const UINT COST_GROUPMEMBERSHIP_ADD = 10000;
+const UINT COST_GROUPMEMBERSHIP_DELETE = 10000;
 
 const UINT COST_PERFMONMANIFEST_REGISTER = 1000;
 const UINT COST_PERFMONMANIFEST_UNREGISTER = 1000;