Finally setup using 3.2.2, but have a few ? regarding the Windows IUSR_<machine> and <machine>/ASPNET user accounts. 

At work, we use a Win 2k server, with SQL Server 7 as the backend.  In order to use a computer, everyone at work has to abviously login an get validated to get on the domain.  We use either on our intranet depending on any restriction requirements. 

But at home, and in my IIS for DNN, both Anonymous and Windows Integrated Authentication are checked.  As I understand Microsoft, Anonymous is checked by IIS first.  If enabled, the user is passed as IUSR_<machine> regardless if WIA is checked.  If it is not checked, and WIA is selected, then the domain user account is passed.  Example ->  our network uses a 5 & 2 scheme (first 5 of lastname + first 2 of first name.  if last < 5 characters, first name fills void.)  So, John Smith's username would be SmithJo.  We would add this user name to Logins under the Security tab of SQL Server, and any database's he would be authorized to (would also use roles if needed if the database is large and does different things, but on the same data)(did I read this right?)  So, do I really need Windows Integrated Authentication enabled?

The second part is since the server I installed DNN onto is a server in my house, and will not be getting large amounts of traffic, what is the 'account' that is going to be hitting the server from the outside?  I am assuming IUSR_, and once it has touched DNN, <machine>/ASPNET takes over from there?  When, if, I create SP's and Roles in SQL Server, will I then need to use the <machine>/ASPNET login in order for DNN to execute the SP's? Or, will each person who registers on the site have to have that login added to SQL Server, and then to the database? 

I may be way off base here, but what I have read in the PDF files is vague at best on this issue (or maybe I have an older doc), but if there is something that explains interaction between DNN / IIS / SQL Server, I would love to take a look at it.  Thanks. 

R/

Yes, however, depending how you have users setup (at work we have the user <domain>/USERS (and USERS is everyone who is a user in that domain), the popup asking for name, pass, and domain may or may not come up.

Yep, so at least I understand that correctly when I read Microsoft's explanation on their website.  I don't have a doctoral in linguisitcs, so my head starts to hurt if I read too much at MS

Again, speaking in terms of where I work at, when we connect to the SQL server (we use SQL Server 7), I think we do use a Trusted Connection.  I can't remote in at the moment because the shipyard is shutdown for the x-mas holidays, and major replacement of power and LAN cabling due to Hurricane Katrina.  Since I am not a SQL Server guru, please forgive me if I am way off base, but I know that somehow the person's login is passed to SQL, and I want to say its by the SESSION("login") variable, but again I can't verify that with the connectionString.inc files or the SQL Server Reg properties at this moment.  Digress---I do know the users login is grabbed upon initial hit of the global.asa file, and there is also code in there that generates a password and sets SESSION("uPass")  for them.  After adding a user, we exec ussp_setPass that creates a pass using the same algorithm as the global.asa.  Sooo, maybe we aren't using Trusted after all.  I wish I could login to check it.....

If we decide to use DNN on our intranet, I am assuming that we will be able to still grab the person's unique login upon initial page hit (Visual Studio .NET uses global.aspx = Visual Studio 6.0 global.asa?), set the password, and continue on as normal.  My main concern is that if I am John Doe the Electrical Foreman, I do not need to be seeing Payroll Data, nor do I need to see what work is not being completed on one of the destroyer hulls.  Since we have 4 facilities in 2 states, and 17,000 employees in our sector (not counting other sectors associated with us), it would not be feasible to have everyone register on the site. 

If possible, I would like to maybe IM / e-mail you when I can remote in, grab some code and a few screenshots.  That way, I can show exactly how IT has us setup, and what would be the best way to config a possible DNN? 

Thanks.