This is how we implemented as well. the only problem is the basic accounts are forced to rest password every 30 days. be prepared to reset when needed to login with basic account.
