1. There is a post here that contains a script that you can add to the Login.ascx that will do what you're looking for. I've got it bookmarked at work so I'll post it tomorrow. If I don't just remind me.

2. Ummmmm, I thought I'd taken care of that. Is it doing so in the 01.00.03 version as well? I'll have to check the code when I get to work

3. When you say subnet do you mean subnet mask (just checking to make sure we're on the same page)? It was a toss up between having subnet the subnet mask vs. the actual IP addresses and I went with the IP addresses themselves as for a couple of reason. One was that I thought it would be easier for the "everyman" to figure out and two, it was easier to code for . I can pull the IP address out of the information passed to the server but would have to use code to figure out the mask. So what you should be able to do is something like the following: On my home network all my DHCP server hands out addresses between 192.168.0.1 to 192.168.0.50 so in that box I put 192.168.0.1-192.168.0.50. Any system connecting to the DNN install that pass that IP address to the install will automatically log in but any system not in that range (which would be all external as there aren't any valid internet addresses in that range) would bypass the redirect to WindowsSignin.aspx. So yes you understand it correctly but you may not have entered the correct information.

Doh!!! http://www.dotnetnuke.com/Community/ForumsDotNetNuke/tabid/795/forumid/89/threadid/60815/scope/posts/Default.aspx has the script except now it goes into DesktopModules/Authentication/ActiveDirectory/Login.ascx.