My organization has been using DNN as its Internet site for many years, and I have become such a huge fan of DNN that I have been pushing to switch our internal site over to DNN also. An additional requirement with using it internally is that it integrate with AD. Currently, we use AD only to store user data, with little or no role data, so I have set up a test internal DNN site to use AD authentication. It works fine, except I don't know how I should deal with roles now. If I don't pull role data from AD, the only way I know of to add a user to a role is to wait until after they have logged in at least once, which seems rather hokey.  My ideal solution would be to have some  role information stored on AD (roles that I think might be useful in other applications in our agency), and some roles exist in DNN only (ones that would be irrelevant outside of the internal site). From reading previous posts on this forum about how role synchronization works though, it appears that if I use AD for roles, it will delete roles not found in AD.

Also, just by nature of the fact that people are most likely to come post on the forums when they have a problem, it appears that people are having lots of problems using the AD authentication. I am hoping that is not really the case, and would love to hear success stories for using DNN/AD integration enterprise-wide, and what problems you encountered and how you dealt with them.

Thanks!