If your users are in the same domain as your server, you can make this work.
- For Internet Explorer, the user needs to add your site to the "Local Intranet" zone, as it only sends their Windows credentials to sites in that zone;
- For Chrome, the user also needs to add your site to IE's "Local Intranet" zone. All recent versions of Chrome will use the IE zones to control automatic Windows authentication.
- For Firefox, the user will need to open about:config, and add your site to the network.automatic-ntlm-auth.trusted-uris setting.
Multiple sites can be specified, separated with a comma.
They may also need to add your site to the network.negotiate-auth.delegation-uris and network.negotiate-auth.trusted-uris settings, depending on their setup.
Alternatively, they could install the Integrated Authentication for Firefox[^] add-on to manage the list via a friendlier GUI.
If your users are
not in the same domain as your server, then you cannot do this.