The distribution groups are for just that - sending mail etc. You're going to need Security Groups for the users. Easiest thing is just create a Security group for each group you want. You can cut down on the extra administrative tasks by adding the user to the distribution group and then putting the distribution group INTO the Sharepoint Security group. That way if you need to add a user to the group, you do so once and they'll be set for Sharepoint.