NT LOGON PROCESS INFORMATION

I am looking for an indepth article from A to Z on how NT authenticates user accounts, group accounts.I am looking for information on the objects and functions, API’s that NT uses to authenticate how an account is given access to resources.I am working on writing a shell script using nt batch file commands, nothing fancy like ASP or VB, a script that will allow domain users such as helpdesk personnal run a script that adds accounts to the domain SAM. Any help will be appreciated thanks in advance.