Let's separate Windows Integrated Authentication from Active Directory Authentication. Authenticating to Orion using your Active Directory credentials is fairly straight forward. Ensure your Orion server is joined to the domain (member server), then go to [Settings - Manage Accounts]. Select the "Group" tab if you'd like to utilize existing Active Directory group membership, or use the "Individual Accounts" tab to add (you guessed it) individual user accounts from Active Directory. Whether you use individual Active Directory users, or leverage Active Directory user groups, you will have the ability to assign Orion permissions to said user or group the same way you would local Orion user accounts.