Authentication difference using AD Groups or Windows authentication

[Tech-Nic]

Hello
I´m curious about what i could read in the epo 5.10 Docu Windows authentication and authorization strategies - McAfee ePolicy Orchestrator 5.10.0 . You can use WIndows authentication. I tried on Testserver renaming the file, restarted and i can set the options. Clear for me so far. 

We are using in Production the way of registered LDAP/AD-Server without this Windows authentication and added several AD-Groups in the permission sets to give granular defined access to ePO . 

What is the difference between both? Is Windows Authentication using other mechanism? Basicly it seems to be same , just slight different to configure?

Thanks
Nicolai

[cdinet]

Renaming the winauth.dll file is meant only for environments where there are multiple domains or sub domains.  If you only have one primary domain, do not use that method.