SRX and Active directory intergration

Hi,

I'm trying to get our new SRX 320 to intergrate with our windows AD so that when our staff try to access the internet the SRX will allow/deny access to specific sites etc.

I have found a few documents on how to do this and I undertand that the SRX needs to "see" the Windows event viewer, however, how does the SRX know what IP address a particular user has - I assume the SRX learns that user-x has logged in as has IP address 192.168.100.x, then allows/denys based on the source IP that user-x has.

For the SRX to know what IP address user-x has does the AD need to run a DHCP server - or am I totally missing the way it all works?

Thanks,

Luke