A number of people have been having issues getting the AD provider working on Server 2008 even when following the documentation. I finally go a chance to setup a 2008 server today and do some testing. Below is what I found.

1. The IIS 6 Metabase Compatibilty needs to be installed (I installed all but the IIS 6 Management console). Otherwise an error appears on the Settings page an the provider is unable to test whether the site is running under the correct pipeline.
2. Impersonation has to be used (see the documentation for instructions on using impersonation).
3. The user used in the impersonation has to be part of the administators group on the server.

I'm hoping to find a way around #3 but that's what I've found so far.

[Moderator edit:] Download page has moved here.

Hi Mike,

I have done as you instructed and it finally works fine on DNN 4.9.4 on Winows Server 2008 and IIS7. I tried the same thing on DNN 5.1.0 but it doesn`t work and the following message (as before your new instructions) appears:

This site is currently Unavailable
The Active Directory Provider requires the site to be running
under Full Trust and/or in Classic mode in IIS 7.0
Commenting out the line:
<add name="Authentication" type="DotNetNuke.Authentication.ActiveDirectory.HttpModules.AuthenticationModule, DotNetNuke.Authentication.ActiveDirectory" />
in your web.config will allow you to get the site running until it meets the above requirements.

Could you please try to test with DNN 5.1.0?

Thank you very much,

Marko

Mike,

I tried to disable User Account Control, and then I was able to use the AD Provider by only installing IIS 6 Metabase Compatibility. The user account who runs the AppPool (eg. NETWORK SERVICE) needs write access to the C:\Windows\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files folder, but impersonation and admin privileges are not required.

Is there anyone who can explain, why UAC should be enabled on a server in an Intranet environment, where nobody but (local) administrators may access the server console (directly or remote)?

Best wishes
Michael