Your manager has informed you that the highest level of security is essential for your corporate intranet. However you do not want to use the infrastructure of certificate services. The authentication must be transparent to users, and allow you to secure intranet resources with the group accounts existing in Active Directory. Taking into account that all users are within the corporate fire-wall, what authentication method should you choose?