Windows groups condition not available in NAP on Server 2008R2

This problem applies to 4 different servers I have in my domain. Two are domain controllers configured with NAP, two are RRAS servers with the NAP role installed.

On any of these systems when I want to add a condition to a connection policy, any of the group options (Windows, Computer, User) is not available.

What am I missing?

Thanks,

GaryO