slhilbert wrote
Dennis,
Good point I do leave it in mixed-mode. That wasn't my intention. Thanks for pointing that out.
Stuart
I would say that there is a difference between "pure" AD integration mode, and "not-so-pure" integrated mode. If you uncomment the authentication line in the web.config, but leave it using "forms" authentication, then in "theory" you are in mixed mode, but everyone (including the general public) would prompted to log into AD upon visiting your website. Intranet AD users wouldn't see the prompt, but the public would. If they hit cancel, they might be able to log in using the DNN login, but it is disconcerting to first-time visitors that they need to log in to use the website (many won't return).
I would refer to that configuration as an AD-Integrated method, even if not quite "pure", as by default everyone is prompted to log into AD first.
In a true "mixed-mode" setup, you'd want to leave that line in the web.config commented out, and then redirect local users to the windowssignin.aspx file. This allows non-AD users to browse the website unauthenticated, but allows people to log in (by either AD or forms login method) whenever necesssary.