Hmmm... easiest way is to use IIS, not Apache. IIS honors NT ACLs but Apache doesn't understand ACLs (file permissions around NT security). If you really need this capability, you have several options, but the easiest way is to run IIS. Or, perhaps run IIS on some other port - and make requests from Apache to IIS to validate the user with the basic authorization string that comes with the headers after you force a 401 challenge.
Dave
===========================================
http://badblue.com/helpphp.htm
Free small footprint web server for Windows
PHP, file-sharing, Access/Excel transcoding