Hey Scott

You mean that your users now don't have access to their old roles DNN roles? Or you've created roles that correspond to your AD groups and the users aren't synching to them. You shouldn't have to role back the provider to fix things but if you do you can uninstall it from the Host->Host Settings->Authentication Services section. The package uninstaller will reverse the changes to the web.config in the <httpModules> section but if you used impersonation in your web.config you'll have to change that.

To log in as Host (I'm guessing you unchecked the DNN Standard Login under Admin->Authentication) you can open the database, open the Users table and set IsSuperUser to true for your account. You'll now have Host priviledges.

That all said.... if it was a case of old DNN Security Roles that users don't have access to anymore then there's two ways you can fix it.

1. Manually add their AD accounts back to the Roles as they login (not so bad if there's not a lot of users and it's membership isn't going to change all that often).
2. Create AD Security groups using those DNN Security Role names and add the users to them in the AD. If you've got synchronization checked under Admin->Authentication then your users should be automatically added to the corresponding DNN Roles.

If you haven't read it yet, the documentation covers the setting up of Roles to sync with the AD.

One thing you can do is to look your user account up in the Users table and change the IsSuperUser field to True. Then when you are logged in you can at least have the host account priveleges.

1	host	SuperUser	Account	True	NULL	host	SuperUser Account	True
2	admin	Administrator	Account	False	NULL	admin@hcdnn01	Administrator Account	True
3	Domain\brianat	Briana	Tarrance	True	NULL	btarrance@domain.com	Briana Tarrance	False
NULL	NULL	NULL	NULL	NULL	NULL	NULL	NULL	NULL

I also created a little module where I can click a button and it will import all of the security groups from our Active Directory to DNN. Then at least all of your roles are there. I'm not sure how universal the code can be applied, but if you're interested let me know and we'll see if it can work for you.

The only problem I am having right now is that my users are only added to the first role group in the list. Once they are found in one role group, they are not added to any more groups. If anyone has any information on that one, I'd be very glad to hear it!

thanks