Here’s a good command to see which DC the ACS server is querying:
acs troubleshoot adinfo -a
This command is only for advanced troubleshooting and may incur a lot of network traffic Do you want to continue? (yes/no) yes Local host name: dr-cisco-acs02 Joined to domain: cordero.me Joined as: dr-cisco-acs02.cordero.me Pre-win2K name: dr-cisco-acs02 Current DC: grn-dc-dh03.cordero.me Preferred site:Subnet site: Warning! Unable to locate computer's subnet site in Active Directory. Please advise your system administrator. Zone: NULL Last password set: 2015-02-04 20:55:00 EST CentrifyDC mode: connected