Workflow filter to deny add member to group A except from members of groups B,C,D

Hey all,

Been trying to figure how to make this work but no dice. Basically i want the workflow to not allow any user from being added to Group A except if they are members of group B,C,D.

The added member with 'member of' propriety is not working. 

We also want svc account from a certain ou to be able to be added and i got that working by using inparent and *Service Account* text

Any insight or help would be appreciated!