Radius Integration with Active Directory

Hi all, I have installed a freeradius machine on ubuntu server, now my boss wants me to integrate it with the Active directory so that the users can be authenticated through it. I was wondering design wise does it make sense to have a free radius server in between if we can run radius on the windows machine itself? what are security best practices in this case? Cheers