How does one uses it?

I played with client pass-through settings & never could make it work in a
logical way

Always users get all sorts of errors before they can login with Domain
cached credentials to local machine only (all I really need in fact is local
machine only)