I setup a Restricted Groups for a customer a while ago. To verify the Group Policy Object (GPO) operation I used Resultant Set of Policy (RSoP) in the Windows 7 SP1 client.
After reviewing the Resultant Set of Policy (RSoP) report I found out that a red alert message (with “X” inside it) was appeared in the Resultant Set of Policy (RSoP) report.
Then I reviewed the local group membership and I used “gpresult/v”. In practice, the issue didn’t reported by the other tools.
After contacting Microsoft support I found out that this issue is software bug, that may fix in the next version.