Passthru Authentication

How can you add an Win2K file server to a NT 4.0 domain without joining the domain and still authenticate the users that will be accessing the new Win2K file server. There are 400-500 users on the current domain that will need access to the new fileserver. Any suggestions will be greatly appriciated, even adding an additional server if necessary.