Hi Mark

The AD provider with, possibly, some modifications should work well for what you want and you can combine it with the Social aspects of 6.2. In the end all the AD provider really does is allow users that are part of the domain a way of logging in (either automatically or manually) with their domain credentials negating the need for yet another login/password setup and it provides a way of populating DotNetNuke roles based on the security groups they belong to. After that it's no different than a regular DNN account.

Why I say that some modifications might need to be done to the provider is that contact information like their phone # is pulled in from the AD if it's available so if they changed that number it would get overwritten the next time they logged in.