Yea, it's a no-go in Apache but in IIS:
right click on server to get Web Site Properties dialog, click on 'Directory Security' tab, uncheck anonymous access and check 'Integrated Windows Authentication'.
You can get the user's id and computer through env. vars...use phpinfo() to figure out what those vars are.