I have found the API to add a group programmatically, the next logical step is to add this group to a security policy, such as "Create Global Objects".
What is the Win7 API to programmatically add a group to a security policy?
How To Manage User Privileges Programmatically in Windows NT
To look up the SID for a group, use LsaLookupNames