Must be missing something in your configuration; Following the steps in the online help in the Authentication section got me through this the first time. The mistake I made twice was typing in the whole AD Bind Account info string incorrectly. For a bind user like "ASGBIND" that's stored in an OU called "Service Accounts", one would put "CN=ASGBIND,OU=Service Accounts,DC=Yourdomain,DC=local" (if your AD domain was yourdomain.local). I would invariably goof this up, sometimes putting CN=Service Accounts in there instead (one should only use CN for the "OU" designation if it's one of the built-in containers, like "Users")... check those settings out.
If you are using Administrator as your BIND account, I highly recommend you create a custom account in your AD and use that; I would not use "administrator" as that account.
