When trying to provision groups (ie: global security group), the options are greyed out.
This occurs when trying to to this in a target Exchange 2007 environment
This functionality (ability to choose the Group Type of either "Security" or "Distribution") was added in build 22.214.171.124 (and above).
Please contact Quest Support to obtain this build.
The AD Groups Provisioning Wizard now supports creation of universal security groups in either Exchange 2003 or Exchange 2007. In the Choose your method for finding objects screen, if Group Scope is set to Universal, the Security option for Group Type is now enabled as a valid choice.