After you select and configure a login module, all authentication transactions are performed by that source. The CW2K Server still determines the user roles; therefore, all users must be in the local database of user ID's and passwords. Users who are authenticated by an alternative service and who are not in the local database are assigned to the same role as the guest user (by default, the Help Desk role). To assign a user to a different role, such as System Admin role, you must configure the user locally. Such users must have the same user ID locally as they have in the alternative authentication source. As for the domain groups, you can try it to see if tt works.
