NPS server works for both stand-alone and connected to ZD AP, as it works exactly as a standard Radius server.
With ZD you can also make direct authentication from MS AD, which doesn't require any configuration on MS Server. Unfortunately, this mode applies only to WEB-authentication, which is not of much use -- except for guest network. But who will authenticate guests through MS AD?