you can have it authenticate users off a windows PDC, but it won't know what kind of access to give them, so it will set up a generic home directory (if configured to do so), and give them some sharable space with other users. So if this is an internal network computer that should be relatively good access control.