If checked, anytime user logon, his security groups membership will be synchronized with DNN roles (if roles with same name exists in DNN data)

Yes the module can do that, it obtains all user info from AD and insert into DNN on first time user logon

My version does exactly this, and hopefully soon the public version will do the same. On each login if Sync Roles is enabled. It will check both DNN and AD for membership rights, if it's in AD but not DNN, it will add. If it's in DNN but not AD it will delete the rights.

Also, my version exposes a user profile mapping which allows you to sync any user property to the DNN profile table (personalization). On my instance I sync manager and homeDirectory to the DNN table. Then on my "Explorer" module I can bind the File Manager to the Profile > Ldap:HomeDirectory object for allowing users to access their home directory from offsite.

I'm in the final stages of testing and packaging everything together to submit to Tam. I'm hoping it's not too late to get it included in the 3.2 release.