In the past I have set up many Authentication Servers to the Concentrator using NT Authentication. In many cases we tried AD authenticaton first, only to run into problems. In the past the problem was always that new users were able to authenticate, ...