Im logged on as the Zope User. If I list groups and users from Plone Site Setup, why can I see any groups or users from Active Directory?
A fresh install of Enfold Server will use a default Authentication Profile called Default Plone with Cookie Authentication. You cannot access AD data when you use this profile. You need to change it to another profile. (See Selecting the right authentication profile). However, once you have configured the correct profile, the Zope user will be able to view AD groups and users.