I was able to get windows authentication working, but it seems that the web application was sending the NT domain and the username as the email address (GetRolesByUser function in Security.vb). This wouldn't be a problem if you could enter an email address that matched what was being sent by the GetRolesByUser.

I found if I tried to enter 'domain\username' in the email address a web error would occur because of the '\'. I tried everything I could think of and finally ended up solving it by modifying the GetRolesByUser SPROC to strip the domain and the backslash out of the @email variable that is passed to it before the database is queried for the roles. Here is the modified code to the sproc:

/* returns all roles for the specified user */
ALTER PROCEDURE GetRolesByUser
(
@Email nvarchar(100)
)
AS

--Remove the NT domain name and back slash from @email
--(i.e. change 'domain\username' to 'username'
DECLARE @position INT
SET @position = 0
WHILE @position <= DATALENGTH(@email)
BEGIN
IF (ASCII(SUBSTRING(@email, @position, 1)) = 92) --Looks for the '\' character
BEGIN
SET @email = (SUBSTRING(@email, @position + 1, DATALENGTH(@email)))
BREAK
END
ELSE
SET @position = @position + 1
END

--Existing code
SELECT
Roles.RoleName,
Roles.RoleID

FROM
UserRoles
INNER JOIN
Users ON UserRoles.UserID = Users.UserID
INNER JOIN
Roles ON UserRoles.RoleID = Roles.RoleID

WHERE
Users.Email = @Email

Once this is put in place of the original SPROC, you enter the NT username (without the domain or backslash) in the email test field with no password, save and then assign the role you want to the new user.

I hope there isn't some easy setting I missed that will allow the roles to work with NT authentication, but I couldn't find anything in the docs or the posts. Let me know if this helps you....

Jeff

Prefer simpler solution:
Change SPROC to match "Name" Column to passed parameter "@Email"

CREATE PROCEDURE GetRolesByUser
(
@Email nvarchar(100)
)
AS

SELECT
Roles.RoleName,
Roles.RoleID

FROM
UserRoles
INNER JOIN
Users ON UserRoles.UserID = Users.UserID
INNER JOIN
Roles ON UserRoles.RoleID = Roles.RoleID

WHERE
Users.Name = @Email
GO


Of course I've had to DASM/ASM ASPNETPortal.DLL, and mane SPROC's to get all the Table & Column names to match CASE.

PS (to Microsoft): Not everybody uses "CASE INSENSITIVE" on SQL servers.

I found an even easier solution.

I used Server.UrlEncode() to encode the backslash character in all instances of Email.Text and UserName in the following files:

ManageUsers.aspx
users.ascx

My next task is to find a way to automatically assign a default role and create a user ID for all domain users upon first login. Has anyone tried?

I am new to this, can you show me exactly where are the changes to be made.

I tried chainging it using web matrix and after that  when i click on Add New User at the Manage User, i get a Runtime error.

Next, I also found some problem with the change password function.the password does not get encrypted, it just update the password field at the database in ASCII.

After changing the password, i try to login, it will never work. I have to copy the hexadecimal password from the guest account to overwrite and then login with the password "guest" in order to get in.