I have the AD module working, and all is going well, till I notice that users are not being assigend to users on logon.  after looking through the forums and the documentation, I find out that I need to create a security role in DNN that matches the group in AD that I want the user to be part of.  So, I created the roles in DNN that match the ones that I want synchronized, but it does not work.  Any help on this would be greatly appreciated.

I got it to work.

Windows Server 2003
DNN 4.0.2
IIS 6

• You do not need a one word group name in AD.
• You do not need to format it <domain>\<Role> ex: contoso\HR
  
• You do however need to make sure that the role that you are trying to synchronize is a Global Security group and not a Universal Security Group in AD
• Role Synchronization does appear to work with Forms authentication as well as Windows Authentication.
  

Hope this helps others who find theselves in the same situation.