Discussion on:

Assigning group membership to built-in groups with Group Policy

I have used restriected groups with great success and it is quite useful. The main one I use is adding desktop service groups to have access to all desktops for support. Often you will not find it implemented because there is a lot of misunderstanding about the "members of this group" and "group is a member of options." Recently have switched over to preferences for groups for doing group modifications. Allowed us to enforce group membership and flexibility to the desktop support to apply admin and\or remote desktop group memberships per desktop and not broadly applying permissions for a user to a desktop.