Howard here's a quick bit about our domain structure & a listing of 3.63 & 4.02's enumgroup output. We have two domains, one is AD and the other is NTLM and each are set with a two-way trust.
All users log onto dom1 (NTLM domain), but most computer accounts are members of dom2 (AD domain) because we use RIS to set up PCs. All clients are Win2000 & some XP, no 9x anywhere...

So here are those outputs as run on a Win2K workstation with an admin account on Dom1 -- as you can see some groups on 4.02 display the domain name and local groups, but some groups listed on the 3.63 enumgroups output are NOT listed on the 4.02 output (specifically our accounting NT global group):

3.63 EnumGroups:

Domain Users
Accounting
Domain Admins
Developers
NFuse Access ECase
LEACCESS
FullAuthority
Helpdesk
Global Users
NoMailNotify
NoMailSound
FlyteTrax
Remote Access GLOBAL
THINCLIENT
Internet
NFuse Access Desktop
Accounting
AirBourneExpress
CMDSummation
TechFilesSummation
Remote Access Citrix Desktop
Remote Access ECase App

4.02 Enumgroups:

DOM1\Domain Admins
Everyone
JULESPC\Administrators
JULESPC\Power Users
JULESPC\Users
DOM1\Domain Users
DOM2\Developers
DOM1\Cleveland
DOM2\LEACCESS
DOM2\FullAuthority
DOM2\Helpdesk
DOM2\Global Users
DOM2\NoMailNotify
DOM2\NoMailSound
DOM2\FlyteTrax
DOM2\Remote Access GLOBAL
DOM2\THINCLIENT
DOM2\Internet
DOM2\AirBourneExpress
DOM1\TechFiles Summation
DOM1\TechFilesSummation
DOM2\P-3-ISCOLOR-Q1
DOM2\BetaEpolicyAgent
DOM2\eCase Beta
DOM2\P-3-IS4000-Q1
DOM2\BB_DOMAIN Domain Users
DOM2\No Banner
DOM2\P-3-IS4000-Q1
DOM2\No Banner
DOM2\BetaEpolicyAgent
DOM2\eCase Beta
DOM2\P-3-ISCOLOR-Q1
LOCAL
INTERACTIVE
Authenticated Users
eCase Beta
No Banner
NoHideExt
P-3-COPYCENTER
Remote Access
SMS Admins
DelPrinters
BetaEpolicyAgent
P-3-IS4000-Q1
P-3-ISCOLOR-Q1
Power Users
Advanced SMS
Basic SMS
Remote Access DIAL-UP
Remote Access SERVER
Remote Access WEB
Administrators
Users
Account Operators
Backup Operators
Print Operators
Server Operators