We had a similar issue when we changed our Domain level to 2008 from 2003. We had to change the security group to domain local for it to start working again.
Our setup is:
User group - Domain Global
Group containing the User Group - Domain Local
We had to make them both Domain Global groups.
Hope this helps