I got the AD provider up and running on a DNN5 site.  I was able to figure out how to install and configure it by the forum posts and tinkering.  I'm now auto-logging in through the WindowsSignIn.aspx page.  I don't totally understand how it works.  I want to create a parent portal that all Members in our Business Unit have access to.  I then want to create a separate child portal for each department.

Now that I have AD integration up and running, how do I restrict access in each portal?  When I go to the users or security role screens I do not see a way to get to my AD users or groups. 

Thanks for your help!

Thanks for the reply. 

I added the IT department AD Group to the portal and it worked great. 

However, I then had a normal user login to the site.  There is not a role setup affiliated with any AD group she belongs to .  It allowed her to pass-through and automatically set her up as a registered user & subscriber.  Is there a way to disallow her access unless her AD group is setup as a security role?

How complicated would the source changes be for this?  I like everything else about the provider except for it auto creates users that are not in any AD group mapped to a security role.  I'd like to change it so that prior to creating the user it looks up the AD groups in the Portal and checks if the about to be added user is a member in any of those groups.

It looks like the AuthenticationLogon() routine in the AuthenticationController class would have to be altered.  Am I correct that this clause would need additional logic wrapped around it:

If Not objAuthUser Is Nothing Then
  'Add logic here to check if objAuthUser is member of AD groups in Portal
  Dim createStatus As UserCreateStatus = objAuthUserController.AddDNNUser(objAuthUser)
  intUserId = objAuthUser.UserID
  SetStatus(_portalSettings.PortalId, AuthenticationStatus.WinLogon)
End