Yes, Active Directory passwords can be validated via an LDAP bind to the directory. This allows AD to maintain control over the password policies, lockouts and expiry.