Mike Horton wrote
When you say extended properties aren't replicated what extended properties are you talking about? There's a chance that they aren't as there's a finite list of properties that are checked (mainly the most common ones). I can post the whole list here tomorrow if you want me to but I don't have the provider code handy at the moment.
I've added several new fields to the user profile such as EmployeeID, ManagerID, etc. that exactly match the AD objects; I assumed these could be replicated in addition to group memberships but I may be mistaken on that. If there are specific properties that CAN be obtained that are not in the current profile; yes, I'd like to see the list if that wouldn't be too much trouble.
Mike Horton wrote
Group memberships not working...I just want to check before I go further....do the Roles exist in DNN that match the AD security groups already?
Yes, the security roles exactly match the AD groups. What I wasn't certain about is whether or not Public Role and/or Auto Assignment needed checking. In fact, users that ARE members of the AD groups are being REMOVED from the matching DNN role rather than being added...
Mike Horton wrote
Win Logon pop-up...there's nothing we can do about that one. That's a network configuration and I'm guessing that it's handled by group policy in your situation. Whomever handles group policy in your domain should be able to put a wild-card listing so that any computer on the domain has any URLs that belong to the domain in its Intranet or Trusted sites list (the URL that needs to be entered is http://*.domain.com).
As for continuous logon pop-ups showing up....Is there anything extra running on your domain computers that might be blocking the information that's being passed? I'm thinking 3rd party firewall programs like Zone-Alarm or anti-virus program that is blocking the passing of user credentials (Norton used to be horrid about that).
The odd thing about the Login popup is that it occurs in an inconsistent fashion, most users get logged in fine. Yes, there is a wildcard listing for both IE6 and IE7 for the local intranet zone but it functions 60-70% in IE6 and about 90% in IE7. Regardless, the popup is the main irritation for those users who are not getting logged in. Here are some clues for different 'solutions' that work in some cases, that may help:
If user A is getting prompted repeatedly with the login popup (their valid, already in use credentials will NOT authenticate them into DNN), I can go into DNN and reset the users password. They can now go to the site and be auto-logged in with their domain credentials; however, if I check their account status, it shows the last login days ago, not today.
If user B is getting prompted repeatedly (their valid, already in use credentials will NOT authenticate them into DNN), and they clear the browser settings and restart their browser, they go to the site and are logged in. At some point however, they get intermittantly prompted for the windows login again.
If user C is getting prompted, they key in their credentials into the login box and it works. They continue on into the DNN site and are logged in.
I used A, B and C as examples because the 'solutions' are not consistent. It varies across the domain. We have NUMEROUS other web based apps that are referencing the AD that work flawlessly... it is ONLY DNN that is experiencing this behavior.
Any ideas?