DNN 6.01.02, AD 5.0.2, Server 2003, SQL 2005.  

When the site was on a development box (Domain Member), connected AD with basic settings, worked fine.

Moved site to production server (non-domain member).  User has read only right to the domain.  Made impersonation changes as outlined (page 5 Users Guide).  For testing, we opened the firewall from web DMZ to the network (allow any both ways), can telnet from web server to domain on port 389.

Also tried Authentication Type 'None'. 

We get error, Fail accessing GC, checking root domain, and accessing LDAP, can not access LDAP.

Any ideas would be excellent.  Thank you.

-Jeff

While the user on the server is not literally a domain user, I did create the local user account as the same username and password the same as the domain user that is configured in the AD module and of course is the same user that makes AD Auth work on the development server.  This is not a 'real' domain user though, this is an old XP workgroup networking trick that shouldn't work in a domain environment.

I appreciate your feedback.  I'll check out that program as well as other alternatives.

Thanks for your work on this project.