If you need more than a handful or so of users, then you're probably better off using LDAP, otherwise manging the local user database on all of your endpoints is going to be a hassle.
Note: you will need to be running at least software version CE8.2 on the endpoint to get the LDAP user management functionality.
Wayne
Please remember to mark helpful responses and to set your question as answered if appropriate.