AD client flowchart - how the resource confirms authorisation.

Hello,

i am trying to put together a flow chart of how a "Client" would retrieve information from a file-server in AD domain.

i have got so-far in my conclusions.

1.Client wants to access CV.doc on its J: drive.

2.Client makes LDAP request into X.500 Dbase on AD DC to find location of this file.

3.Client then connects to location of file (file-server-A) and requests file.

NOW it gets abit shaky

4.File-server-A then contacts AD DC to confirm Client has rights to the file.

or

4.File-server-A already has file attributes given to it via DC. (i don't think this is so).

5.AD DC confirms Client has rights to access this file.

6.File-server-A send file to Client.

i have been looking for sometime for something to explain this , but i am unable to find this information

any help would be great .