The AgilePoint System User (as defined in the AgilePoint Server Configuration utility) should belong to the Active Directory domain.
AgilePoint Server's Application Pool's Identity user account (as configured in IIS) needs to have read permissions to the Active Directory server and data.
