Cannot Select Local Groups in Snap-in on Member Computer

When you are using the Security Group Policy editor to configure a restricted group from a computer that is a member of a domain (rather than a domain controller), you cannot select domain local groups.

Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.