[Samba] Samba ADS member.

[Meli Marco]

Hi all, 
I don't have understand if I have to set PAM module to authenticate my
windows users ADS to a share on Samba ADS member. 
If I'm right only If i have to connect by a linux client, is it alright? 
Also is posssible to force NTLM authentication by W2K client to W3K ADServer
operating in native mode, so escluding kerberos authentication? 
Is it possible that it cause me some problems related ACL? 
Thanks. 
Marco.