First - thanks to the DNN team for moving off the aspnet membership - at least at the application level.  I was pulling my hair out trying to find a way to manage my domain users across multiple portals.  This one change alone is worth its weight in gold to me. 

Has anyone played with managing the users and roles across portals (parent to many children portals)?  I am able to copy users and roles, but haven't taken the next step to create SP's to perform this in one step and then program a module/page to do this.  The core changes mentioned above make things so much easier, but I want to know if any others have run into any issues doing this - or if anyone has done any of this yet in the new version 4.3.x. 

While all the users have to do is log into each portal once with their AD credentials, it would be easier to get them to do that in one primary (main) portal and have it propagate to all automatically, since not everyone in the domain (staff and students have different AD domains) will understand what they need to do - and some already are trying to register (reserved for non-AD external users).  This greatly influences the design of portals for large groups vs. page sections within one lone portal. 

Any comments/advice/info is greatly appreciated!