Everything appeared to be set up correctly, all permissions applied on the shared folders, shares visible on \\2008SERVER etc. but communication errors every time any of the machines tried to scan.
It turns out that there's a default setting on the 'Default Domain Controllers' Group Policy that is throwing a spanner in the works.
Open your Server Manager and drill down as follows:
Features
Group Policy Management
Forest:.....
Domains
YourDomain.local
Group Policy Objects
Highlight 'Default Domain Controllers Policy' and click show all in the right pane.
You will see that the Policy 'Microsoft network server: Digitally sign communications (always)' is Enabled.
Right clicking on 'Default Domain Controllers Policy' in the left pane and selecting Edit will allow you to drill down and change this policy to 'Disabled' as below:
Clck Start -> Run, type 'gpupdate /force' ond click OK to ensure the change is made and your MFD/Scanner should now be able to scan to file on your new 2008 server.
