exUserFolder with SMB Authorisation SUCKS

Yep, it sucks the big one. The portal_membership tool wrapper is completely out of date, the XUF seem content to blame the CMF people for changing (I'd say improving) their product, rather than just fixing it. You can get it to work by using a Null Property Source, but then roles generally suck - you'll have to add the Member role manually to every user. Also, when you try and manage the portal, you'll find that *sometimes* you're redirected to the portal's login form in the main ZMI frame. So for all you poor suckers running out there on NT4 domain security, my sympathies are with you.