ACS v5 should query desired Domain Controllers

Here’s a good command to see which DC the ACS server is querying:

acs troubleshoot adinfo -a

This command is only for advanced troubleshooting and may incur a lot of network traffic

Do you want to continue?  (yes/no) yes
Local host name:   dr-cisco-acs02
Joined to domain:  cordero.me
Joined as:         dr-cisco-acs02.cordero.me
Pre-win2K name:    dr-cisco-acs02
Current DC:        grn-dc-dh03.cordero.me
Preferred site:    
Subnet site:
  Warning! Unable to locate computer's subnet site in Active Directory.
  Please advise your system administrator.
Zone:              NULL
Last password set: 2015-02-04 20:55:00 EST
CentrifyDC mode:   connected
More Stories
Palo Alto Cheat Sheet – User-ID