Multiple authentication sources?

I’d like to authenticate via ActiveDirectory, but also have a built in Guest account that does not go through AD. Is that possible?

Yep!

Set up your authentication profile with a soft failover to another authentication profile.