I appriciate the time you took to write how to set up security, but your answer doesn't help my problem.

I think running the system with other permissions than you prefer, won't change that I can login with another domain account than administrator.

I'f also checked the "Professional Dotnetnuke" Book that I have  and it describes the installation I am currently have, Running the SQL Dateabase with integrated security.

I really would get an answer to my problem, please, aren't there any other ideas out there?

Thanks Mike,

the problem is:

I've set up like this:

Authentication Settings This editor allows you to configure the Authentication Provider.   Enabled? Check to enable Active Directory Authentication for this portal Hide Login Controls? Hides the Windows Login button on the Login screen. Synchronize Role? If select, user's role will be synchronized with Windows Active Directory security group each time user logon Do Not Automatically Create Users? If checked Active Directory users not able to log into the DNN portal until an account is created.     Provider Select Authentication provider for this portal Authentication Type Select Authentication type for this portal (Delegation is recommenced) Root Domain: Root Domain in format yourdomain.com or DC=yourdomain,DC=com. Leave this value blank if you want to obtain Active Directory objects from root forest User Name: User Name, who has permission to access Active Directory Password: Password of this User Confirm Password: Confirm Password Email Domain: Email Domain to be used for user email when your network doesn't have Windows Active Directory (Blank is recommended) Default Domain If you enter the default domain users can login with just their username instead of DOMAIN\Username. Auto-login IP Address (Optional): Enter the IP string, address, or range separated by semicolons that you want to automatically log in (eg: 192.168.0.1-192 - 192.168.0.100 for any IP in that range, 192.168.0.50 for only that IP.). An example string could look like 192.168.0.100;192.168.0.1-192.168.0.100 Error: is currently unavailable. DotNetNuke.Services.Exceptions.ModuleLoadException: Zugriff verweigert ---> System.Runtime.InteropServices.COMException (0x80070005): Zugriff verweigert at System.DirectoryServices.DirectoryEntry.Bind(Boolean throwIfFail) at System.DirectoryServices.DirectoryEntry.Bind() at System.DirectoryServices.DirectoryEntry.get_IsContainer() at System.DirectoryServices.DirectoryEntries.ChildEnumerator..ctor(DirectoryEntry container) at System.DirectoryServices.DirectoryEntries.GetEnumerator() at DotNetNuke.Authentication.ActiveDirectory.Settings.CheckPipelineMode() at DotNetNuke.Authentication.ActiveDirectory.Settings.Page_Load(Object sender, EventArgs e) --- End of inner exception stack trace ---

I can login with MDS4U\ADMINISTRATOR and the AD Password, but not with any other account like MDS4U\DNN (the account under which the IIS runs) or any other account.

I've set up a second installation on the same server for my other website from scratch and get the same results.

I still hope it's a small misconfiguration...

Thomas

I've tried the LDAP Browser and CAN connect with my normal User ID to the LDAP Directory and browse the AD.

I've also removed the trailing \, but the affect is the same: I can login with the administrator account, but with no other...

I've read about impersonation and making changes to the web.config, but I couldn't find an instruction, what to change.

Could you help me on that and I would try to switch to impersonation.

Thanks

Thomas