It uses a negotiate filter, and will fall back to a basic filter if negotiate fails. It is designed to work in conjunction with the Active Directory plugin, since it ties into the security realm currently set up.">