I am having trouble synching the administrators group from AD to DNN.  DNN 5.1.1, AD Provider 5.0.2.  I'm resolved to using the WindowsSignin.aspx to auto-login Windows users at this point, though this may change if I get the impersonation configured.  Synchronize Role is checked.  My issue is this:

I create a group in AD such as DNNUsers and create the same group in DNN as a Security Role.  I add a user to this AD group. I log in to the Windows workstation as this user and browse to the WindowsSignin.aspx file.  The user account is automatically created in DNN and the user is added to the DNN Security Role that matches the AD Group.  Everything appears to work fine.

Except if I have a user in the AD Administrators group, they are not given the Administrators role in DNN.  Is there something special about this role/group that prevents this?  The user account is specifically in the AD Administrators group, not a group like Domain Admins that is a member of the Administrators group.  Is there a work-around to provide an AD group that would map to the DNN Administrators role?

Thanks,

Jeff

Adding nthem to the role means I have to have them log in first to create the account automatically.  Not the best option, but understandable, thanks.  Guess I was think AD authentication would actually be AD integration, but it isn't.

Jeff