I know this an old thread, but if "Active Directory/All Domains" doesn't show up under search policy in the directory utility, it can be caused by an expired CA certificate on the Active Directory domain controller. Also run whatever health checks you can on the domain controller including DNS. Verity that SOA can be contacted.