I have the following problem. I can access AD NT Groups using Win remote agent but the ACS engine doesn't list the users in the groups after mapping to ACS Group. What could be the problem?
AD is running on Win 2K sp4.
ACS will not be able to display OU, it will only be able to access Groups for mapping on AD, and user while authentication, thats the way its designed.
ACS will not list the user in groups, until you do 1st authentication with that user.
Then ACS will list user as "dynamic mapped" user in that group.