You need to ensure that you can modify the Security settings of Group1 by using Active Directory Users and Computers