Being distribution groups is your problem.
The groups needs to be mail enabled security groups. In previous versions of Exchange the store did an internal process to change distribution groups to security groups. That is no longer done by Exchange 2007, so you need to create the groups as security groups.
Simon.