check if your dns is resolving ad domain name and giving GC IP. If DNS is not providing GC IP to ACS after DNS resolution or providing domain controller IP which is not a GC then you can not see users/groups listing after joining AD but your AD authentication will work from ACS.
HTH. Please rate if this resolves your query.
Ninja
