Search notes:

Registry: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy

This registry key contains among others subkeys that correspond to SIDs (of user accounts only?). These subkeys contain a a subkey with the name GroupMembership.

Index