Hi,
i do know that those groups only exist in the domain.
But i guess you could agree that it is possible to detect if the computer the setup is running on is a member of a domain. In that case ask the domain to resolve the name of the groups.
You cannot assume that a setup runs on a domain ...