Hi Again Mike,

Thanks for the speedy and extensive response. It has been fustrating in the past not getting much feedback on what seems to be a rare configuration. Anyway, to respond, there is a trust between the two domains and the internal part works pretty well, I just don't want to lose that automation to make the VPN part work. With regard to VPN, evidently there is VPN... and then there is VPN... some pass all network credentials and some only validate that a user has access rights on some domain on the network but doesn't do the rest of assigning permissions, designating network printers or implementing group policy. This is usually enough for web applications where you are in essence logging in annonomously anyway. The VPN we are currently implementing, SonicWall SSL/VPN, seems to be of the lesser variety. We are looking at a possible Single Sign-on solution but it is pretty pricy, it would be nicer to just get the DNN working the way it works internally.

I totally understand the importance of gradual improvement. The reason I mentioned the use of a clean 4.6.0 install is to stipulate that I didn't upgrade from an earlier version which might have custom tweaks. Although, truth be told, I did substitute my own site template in the install wizard (which is pretty cool by the way). I don't think that it would have impacted the authentication though.

I can appreciate the difficulty of not being able to test things the same from home and work. I can't get in from the outside when I am already "inside" myself without going to another computer that attaches to the internet externally outside the hospital firewall. Occupational hazard... :>)   I would be glad to help test behavior if I can although my coding skills are slight. I do know some of the platform structure however and am not afraid to alter code with guidance on a development instance of DNN. If there are dignostics I could attempt to shed more light I'm all ears. I know that your plate is already pretty full here and appreciate you stepping up. Let me know if there is something I can do to help.

Hal