I use it with WAC on my home server and it’s good enough for anything I need to do. Easy to create VMs using that UI, PS not even needed.

Last time I did this domain accounts needed to include their domain/upn to logon, so there won’t be any account confusion. However if they were accessing the nas from a domain joined machine, it would use Kerberos anyway so shouldn’t be getting prompted to logon. Obviously that is only for SMB shares, other connection types didn’t use Kerberos.

For real, at the minimum use a virtual machine.