A special thanks to Stuart for his AD Fix as it's gotten me started on using DNN for my corporate portal.

But I'm having problems with mixed mode authentication.  I have 1 internal web server that is a member of my domain.  In the root of http://xxx/ I have a redirect page that sends the user to the WindowsSignIn.aspx page that pulls their AD info in and syncs their groups.

I have 2 external web servers on a web farm (I've followed the instructions on enabling web farm support).  These servers are NOT a member of the domain (just to make it more secure).  In the root of https://www.xxx.com/ I have a redirect page the sends them to a page on the portal for login (legal statement and account login module).  When I try to login with my account (after already accessing it internally) it will not allow me to login (Login Failed, remember that Passwords are case sensitive).  If I access this login page internally and login it works.  Now when I go to the external site it then lets me in, but it's not actually hitting AD to authenticate.  I changed my password in AD and I was logging in using my old password.

One quick question to ask, do my external web servers need to be a member of the domain?  From my understanding LDAP is designed to allow non-members to access it.  We're willing to add them to the domain as this will solve another one of our problems, but would not want to unless necessary.