MBAM Installation Fails: Exception: The specified directory service attribute or value does not exist.

Hi everyone --

This is a repost of my question here: http://social.technet.microsoft.com/Forums/en-US/whatforum/thread/29cb1812-e093-4abe-8184-8272c0dd1608

It was recommended I post it in this forum as well.

---------------------------------

I am attempting to install MBAM on a single Windows Server 2008R2 installation with SQL Server 2008 R2 enterprise installed locally on a member server. In a lab environment it works properly (next - next - finish type installation) but in the production environment it fails at this point:

Locating group 'MBAM Report Users'
Adding 'S-1-5-21-220523388-413027322-725345543-10307' to group 'MBAM Report Users'
Exception: The specified directory service attribute or value does not exist.
  StackTrace:    at System.DirectoryServices.DirectoryEntry.Bind(Boolean throwIfFail)
   at System.DirectoryServices.DirectoryEntry.Bind()
   at System.DirectoryServices.DirectoryEntry.get_SchemaEntry()
   at System.DirectoryServices.AccountManagement.ADStoreCtx.IsContainer(DirectoryEntry de)
   at System.DirectoryServices.AccountManagement.ADStoreCtx..ctor(DirectoryEntry ctxBase, Boolean ownCtxBase, String username, String password, ContextOptions options)
   at System.DirectoryServices.AccountManagement.PrincipalContext.CreateContextFromDirectoryEntry(DirectoryEntry entry)
   at System.DirectoryServices.AccountManagement.PrincipalContext.DoLDAPDirectoryInitNoContainer()
   at System.DirectoryServices.AccountManagement.PrincipalContext.DoDomainInit()
   at System.DirectoryServices.AccountManagement.PrincipalContext.Initialize()
   at System.DirectoryServices.AccountManagement.PrincipalContext.get_QueryCtx()
   at System.DirectoryServices.AccountManagement.Principal.FindByIdentityWithTypeHelper(PrincipalContext context, Type principalType, Nullable`1 identityType, String identityValue, DateTime refDate)
   at System.DirectoryServices.AccountManagement.Principal.FindByIdentityWithType(PrincipalContext context, Type principalType, IdentityType identityType, String identityValue)
   at System.DirectoryServices.AccountManagement.PrincipalCollection.Add(PrincipalContext context, IdentityType identityType, String identityValue)
   at Microsoft.Windows.Mdop.BitlockerManagement.SetupCAs.Groups.CreateGroupsDeferred(Session session)

I resolved the SID listed in that error and it is the domain admin account that I'm using to perform the installation.

Domain and forest functional levels set to 2003 native.

Full log listed below:

http://dl.dropbox.com/u/5075672/MBAMInstallationFailure.LOG

Any help would be most appreciated.