VAS (or Quest Authentication Services) and AD

here's an explanation of how it works	12:51 PM
http://blogs.technet.com/b/askds/archive/2009/02/15/test2.aspx