Chapter 3 Authentication for FortiOS 5.0 : Agent-based FSSO : Troubleshooting FSSO : Users from the Windows AD network are not able to access the network
  
Users from the Windows AD network are not able to access the network
If nobody can access the network and your network has only one Collector agent, when it goes offline no users will have access. However if only some users can not access the network, it is likely that user group changes were made recently that are causing the problems.