Thanks.  I don't use manual login.  I'm not even sure manual login would work in my environment since the password isn't stored in AD.  I would have assumed that any manual login would check against the DNN user table which would only contain the username (minus the domain) before going out to AD like the automatic AD authentication does.  Does it go the other way when you manually login and verify the user against AD before pulling up their DNN account? 

Hmmm.  Good points.  Would it be possible to check against DNN first to see if the UserName is there, then query AD based on the GUID to do the password check and sync?  This would eliminate the need for the domain name.

The UserInfo GUID gets set with the Directory Entry's NativeGuid (.GUID = entry.NativeGuid).  You should then be able to add another Function which uses the NativeGuid as the filter.  I've done this for a couple of other field values which I need to use to search for AD accounts.  This should be a unique value across multiple domains.

If you need help testing in multiple domains, let me know - you should have my email address at work from the code I sent you.