Are you specifying the Authentication Servers for the NT Domain? Configuration, User Management, Groups, selct the group and under actions picj Modify Auth. Servers and in there specify your PDC. Aslo under the Group, IPSec tab is authentication set to NT Domain?