I've installed DNN 3.2 and I think I've configured the AD plugin correctly. We want to control access to DNN sites via AD security groups. The problem I'm having is that the AD plugin only synchronizes the roles the first time a user logs into DNN. So here's the setup:

AD Setup:
User1 is member of security group A and security group B

I create matching security roles in DNN for A and B.

User1 logs into DNN for the first time. His username and password are authenticated against AD and a user account is created for him in DNN. Roles A and B are assigned to User1 automatically.

Now...

In AD, Security Group B is removed from User1.

User1 logs back into DNN but Role B remains assigned to User1. It never synchronizes roles again.

If I delete User1 from DNN and he logs back in, roles are reassigned and he only gets Role A.

From what I've read about the module, it's supposed to synchronize on _EVERY_ login. Any ideas?

Thanks!

Kevin

Tam, Thanks for the reply but this isn't the case for me either. Here's another case:

I add Security Group C to User1 in AD (Role C exists in DNN).

User1 logs back in to DNN and Role C is not assigned. Synchronization is not happening for adding new SG's/roles either. The synchronization only works the first time the user logs onto the DNN site. However, the documentation says synchronizations occurs every time the user logs in. Am I missing anything in the config/setup?

If AD role synchronization doesn't occur on every login will it be supported soon? It would greatly reduce redundant maintenance for AD/DNN administrators.

Thanks!

Kevin