Hi Derek,
When you register the NPS server in AD, you get the option in the dial-in tab of the user properties, to let NPS decide the level of network access for that user, based on a network policy.
Similar, if you register a RRAS server in AD, you get the option in the dial-in tab of the user properties, to let RRAS decide the level of network access, based on RRAS profiles.
greets,
