Group? I assume it is windows security group in AD.

We use "Be made using the login's security Context" without any issue..... Or you may forget to create SPN?