No your users will authenticate with their credentials, trust me on this. All the impersonation user does is say, "Hello AD, yes I do have permission to talk to you and pass these user crendentials to you." I don't know if you use the Server Administative Tools or not but if you do try running them as a user that's not on the domain. It'll fail but as soon as you give it a domain users credentials all is good. It's the same concept.

I'll have to see if I can setup an XP SP2 install to try and duplicate what you're seeing as far as the WindowsSignin not working.

Hi,

I have been working through a couple of issue with AD in DNN, it maybe that my brain is now fried but I have just thought…

Regardless of what roles you set up in AD, how will dotnetnuke recognise which role your in when looking you up against the DNN DB?

Is it not that everybody will be able to login because windows auth is turned on, and once they have done so, we need to assign them to a DNN role?

Thereafter the user will authenticate automatically and the role will be assigned by what is against them in the DNN DB.

Is this statement true?

Any help would be great! J

Thanks,

Kevin

Hi Dan,

Thanks for your reply. That has helped me understand things a bit better. :)

Just wanted to query what you meant in point 3 when you said 'if synchronize is enabled'. My understanding is that if you had a group in AD called ''Sales" and then the same role in DNN, a user in AD who is part of that group would authenticate to the role "Sales"

Is there more to it than that?

Thanks,

Kev