It is not needed to create in the Active Directory the two aforementioned groups in member servers, the exception is when you install SCCM on a Domain Controller, if the setup procedure doesn't create them in AD (because the DC has no local users/groups) then you may create them manually and give the correct permissions at the SCCM computer account in order to modify memberships.