Restricted groups are local group memberships managed through AD / Group Policy.