Thanks, but even thought allowing Everyone read/write acces seems absurd, I tried it, and it didn't work.  I still am prompted for a login, 3 times, after which I now get:

401 - Unauthorized: Access is denied due to invalid credentials.
You do not have permission to view this directory or page using the credentials that you supplied
when trying to browse to:
http://biserver/Intranet/DesktopModul...

I stepped through the AD Provider guide form beginning to end for the 4th time in the last 5 days!  Is ther anything I need to do in IIS6, even though I'm on Server 2008 and have teh site set up in IIS 7.0 (Classic pool)?

Another thought...I am remoting in to  the client site to make changes (via LogMeIn).  From the server I Remote Desktop to another machine where I attempt to access the intranet site.  Is there anything wrong with testing this way? 

Thanks guys.  I think I'm going to give it one more try tomorrow (#5 through the documentation) before I buy the 3rd party AD module - or at least try the trial.

 

You need to be logged into the domain account not to the server. If you're logged in to the server it won't pass ad credentials sso since u have none.also server 2008 is trash I had to downgrade to 2003 to get mine to work right. Permissions on 2008 are like vista flaky and run like crap. In dnn in the ldap setup the auto type I set to anonymous then set the iis site to do not allow anonymous and mine worked. Everyone will need read write permissions if they are viewing creating and editing pages in the portal. Read = browse.

RDP might be causing the problem but I'm not 100% positive. I've heard of other users having problems in the past with VPN and it might be related.

You shouldn't have to give Everyone read/write on the DNN install. Network Service (or your impersonation user if you're using one) is more than enough as that's what DNN is going to be running under.

You can give the 3rd party provider a shot but I don't think you'll see a difference. At this point it's looking to me like the problem is external to DNN (the server talking to the AD/IIS).

It just occurred to me..... what happens with you manually login to the website (Click Login->Windows Login and enter your credentials). Does the user get logged in then?