title: Web application to use window domain accounts for authentication
body: <p>If  you have a web application that will run inside a network, it makes sense for it to support windows authentication (active directory?).</p>
  
  <p>Would it make sense to use AD security model as well, or would I make my own roles/security module that some admin would have to configure for each user?</p>
  
  <p>I've never dealt with windows security before, so I am very confused as to how I should be handling security for a web application that runs within a windows network.</p>
  
  <p>I guess there are 2 major points I have to tackle:</p>
  
  <pre><code>1. authentication
  2. authorization
  </code></pre>
  
  <p>I have a feeling that best-practice would say to handle authorization myself, but use AD authentication right?</p>