you would need an ACS (AAA server) in between the Windows server and the router.
Do you have a AAA server within the Windows NT server which would use the NT database to
authorize, like an IAS. If not, you would be needing an AAA server like ACS in between them.