Ok, let me start for the beginning of what's configured where and how and what is occurring.
Windows Server Standard 2008 (x86) SP-2 / IIS 7; joined to the domain as a member server.
DNN Professional 5.6.1
AD Provider 5.0.2
Main site is using normal DNN authentication for web editors.
Have an intranet site configured as a child portal. Configured to use the AD Provider for domain users to access the site from external to view intranet website. Would like it so external users required to log in, but anyone on internal network is auto-logged in. The first half-is working as such, but not the auto-login for domain users via NTLM.
Setup the AD Provider as described in Chapter 3 and Chapter 5 of the documentation.
Was receiving permissions error as described at the bottom of page one (1) here: http://www.dotnetnuke.com/Resources/Forums/tabid/795/forumid/89/threadid/410295/scope/posts/Default.aspx
Issue was resolved by changing the identity of the AppPool the website uses to a domain user. Used the same user which I am using for the AD Provider to use on the LDAP lookups. No special domain credentials are needed. For the DNN folder permissions, I didn't change anything (normal setup) and everything seems to be working fine.
AppPool is running in Classic, asp.net v2.0 mode.
If I un-comment the "<add name="Authentication" type="DotNetNuke.Authentication.ActiveDirectory.HttpModules.AuthenticationModule, DotNetNuke.Authentication.ActiveDirectory" />" line and hit the intranet site, I get the same "The Active Directory Provider requires the site to be running under Full Trust and/or in Classic mode in IIS 7.0" error. Not sure about this.
So the current error is still no-auto NTLM login for users hitting the site from internal (worked in using the development server), and the "Full Trust" error when I un-comment the line within the web.config file.
Hope this helps. Thanks.. -Jeff