Are augmented records the solution? And how?

Hi, I need to integrate a new mac server with AD. Ideally, user authentication would come from AD, and the AD users and groups would also appear in workgroup manager on the mac server so I can configure managed prefs etc. When passwords are changed for an AD user, these changes would be reflected in the OD server. After some investigation, it would seem 'augmented records' are the solution. I understand you need to import users from AD into WGM, but how is this done? I'm new to all this, any help would be much appreciated. Thanks.