Mike Horton wrote If you go back to Host->Host Settings and remove it from there then it'll be totally removed (double check that all the files and the .dlls are gone). Then reinstall and you'll be back to a fresh .03. I just did a WinMerge on the .03 source and the .04 source and the Group search had no changes to it. I just did a search on our school's portal site and checked a couple of user accounts and I'm not seeing the problem with any of the groups either so at this point I don't know what to say. BTW you're not bugging me. This is as confusing for me as it is you.

That is exactly what I did.  Just wanted to make sure.  (Of course I still can not get roles to sink up if the user is a member of many groups.  If they are only in 5 or so, it works.)

I installed the new provider on a W2K8 server with IIS7 and immediately got the following error

[COMException (0x80070005): Access is denied. ] System.DirectoryServices.DirectoryEntry.Bind(Boolean throwIfFail) +451 System.DirectoryServices.DirectoryEntry.Bind() +36 System.DirectoryServices.DirectoryEntry.get_IsContainer() +31 System.DirectoryServices.ChildEnumerator..ctor(DirectoryEntry container) +23 System.DirectoryServices.DirectoryEntries.GetEnumerator() +25 DotNetNuke.Authentication.ActiveDirectory.HttpModules.AuthenticationModule.CheckPipelineMode(HttpRequest Request) +96 DotNetNuke.Authentication.ActiveDirectory.HttpModules.AuthenticationModule.OnAuthenticateRequest(Object s, EventArgs e) +109 System.Web.SyncEventExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute() +92 System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously) +64

I am running in classic mode and have the webserver set to delegation in AD.  .NET is also set to full trust for the site.  Looks like I'm missing a permissions on something, but I can't figure out where.