Platform:  Windows Server2003 R2, DNN 4.3.5, SQL 2005 Express, .NET2.0 - Fresh Install of evrything

I have applied the DNNAD Fix DLL files:(http://www.getyourowntots.com/Projects/DNNProjects/DNNADFix/Download/tabid/99/Default.aspx)

I have followed the instructions posted in this forum: (http://www.dotnetnuke.com/Community/ForumsDotNetNuke/tabid/795/forumid/89/threadid/53005/scope/posts/Default.aspx)

I can successfully authenticate against our AD with profile info being pulled from the AD for name, telephone, e-mail, etc...  But I have never gotten roles to sync.

I have tried creating "domain\role" and "role" security roles as mentioned in previous threads.

Some of my Global Security Groups in AD have spaces in their names, which I thought might be the problem, but I have renamed them to not have any special characters or spaces and still no luck.

I have since found no other clues or things to try in the asp.net forumes or here.  Can anyone suggest something? 

Thanks for the reply.  They're all identical.  Where should the security goups reside within the AD structure?  Would that have anything to do with it?

Right now the user groups (global security groups) are in the "domain.edu\users" OU.

My user accounts are in "domain.edu\students" OU.

In my Admin->Authentication settings, I have Root Domain: "ou=students,dc=domain,dc=edu"

I've tried it without the "ou=students" with no change in behavior.

I've re-commented the authentication module in config.web which (suprisingly) dosen't change anything either.  Actually, commenting out the authentication module stops ugly errors from poping up when a non-domain user account tries to log in.  With it commented out, it still authenticates against the domain and populate the profile fields (name, e-mail, etc..).  I guess I'm not too sure what that module does.  I would like all my users to log into the site by clicking logon (we have too many users who walk away from their computers without logging off first).

any other ideas?

Thanks.  Thats what I figured - but I cant think of anythign else to try.

Another clue I just discovered is that I cannot logon with the domain adminsitrator account "domain\administrator".  Yet I can logon using domain user accounts and have them automatically populate with account details.  Logging in with the DNN "admin" is no problem either.  Something is special with the damain admin account.  But what....