If there is only one server in your net work use primary server for him to take care of the user list and for you to be able to configure nds and users restrictions, secondary server just keeps the list of users included in primary server up to date, stand alone server is the most easy to configure, but you don't have a lot of option in users configuration like (nds).

I prefere primary server to use with ms-sql server.