dseditgroup allows manipulation of a single named group record on either the default local node or the specified DirectoryService node.