I dont know anything about AD. IT admin told me that I have been given access on AD. Here are the credentials I used.

Provider: ADSIAuthenticationProvider
Authentication Type: Delegation
Root Domain: ABC
UserName: myusername
Password: mypassword
EmailDomain: ABC.local

Question 1: When I provide Root Domain as "ABC", or "dc=ABC" or "dc=ABC, dc=local", it throws error object reference not set to an instance of object. When I use "ABC.local" it does NOT throw error but shows following messages.

Accessing Global Catalog:
FAIL
Checking Root Domain:
FAIL
Accessing LDAP:
FAIL
Find all domains in network:
Could not access LDAP to obtain domains info
The specified domain either does not exist or could not be contacted.

If I have been given access to AD, how can I know that I have been given access. Is there anything do I need to change in web.config? I am running dnn as impersonate account with admin rights (for testing only).

Thanks

Currently instead of writing impersonation info into web.config, I am running the portal under admin priviledge account. I set it by IIS > Website property > Directory Security > Anonymous Access Edit button > Anonymous access and then I set the admin username and password. This is a temporary setting to test Authentication. Do I need to set it in web.config instead?

I kinda have the same problem. It works with ABC.LOCAL, but not with ABC. The user has admin priviliges on both the webserver as the active directory server. In the email domain, I have filled in "@abc.com". The web.config uses impersonation with the same user acount.

I hope there is not problem with the webserver and the active directory server being different servers?