Last time I did this domain accounts needed to include their domain/upn to logon, so there won’t be any account confusion. However if they were accessing the nas from a domain joined machine, it would use Kerberos anyway so shouldn’t be getting prompted to logon. Obviously that is only for SMB shares, other connection types didn’t use Kerberos.