DNN Version 4.3.3

I am using the windows authentication for my portal. When a user is logged in, It can be mapped to the active directory roles and display the right name and role information. Then problem is that if I set a page can be edited by a role, the pencil icon won't show up on the modules.

For example, I have a home page with a link module and an annoucement module on it. If on the page setting, I set this page can be edited by "all users", When I logged in as "me", I see "add new link" and "add new announcement" links and all "Edit" pencils. But if I set the page can be edited by "AllEmployees" role (remove above all users role setting and I am in AllEmployees" role), then go to the page, all the "add" and "Edit" links are gone.

The modules on the page inherit the security setting of the page.

Would anyone give advices.  .