Only the users in these two new usergroups can't add friends?
And, are they also in any secondary usergroups? Or is that the secondary usergroup? If they are secondary usergroups, do you have the primary usergroup set to use permissions added from a secondary usergroup?