Hi Mike,

Yeah this is an option that I'm looking at now. I was a bit wary of this though as I haven't really done much work with AD, and as I mentioned previously I need to be able to allow users to edit their profiles then synch these details back into AD, plus just for good measure I have to attach a profile photo. Joy. I'm going to have a play around with the DNN AD povider and just get that working as is for now. Then go from there.

I use the Active Directory Ultimate on our Intranet DNN site and it works well. Users from AD are pulled into DNN when they login and it creates the groups from AD as well. The user just uses the same ID and password from their Windows account and they are in. If they check the remember login box they will not be prompted to login in the future (unless they delete the cookie). One thing I wish is that the pass through authenication worked automatically so the user would not have to sign into DNN the first time, it would just use the Windows token. I have users that click the Logout link which deletes their cookie. Then when they try to sign back in, they mess up their password and end up locking their Windows account (failed logins are passed to AD). This causes them to be locked out of the Exchange server and shared drives and they have to submit trouble tickets to unlock the Windows account. I am considering removing the Logout link to solve it. That's my 2 bits. I see that Codefreak now offers a Single Sign on solution module, I wish he had it available when I purchased.

Mike