Admin Portal can't retrieve groups if it's out of the AD domain
The problem:
If Admin Portal is installed on a non-domain-joined machine, it will have problems retrieving groups correctly, due to the nature of the LDAP protocol.
The solution:
This was fixed in Admin Portal v3.6.2
Limitations:
Subgroups will not be retrieved if member of the specified group, in order to retrieve the subgroup, you need to explicitly specify it.