Are you running Active Directory? There is a feature of Kerberos called delegation of authentication which allows passing user credentials in a multi-tier environment.
Windows Authentication can be used in an internet application if AD is running and the client is W2K. Delegation of authentication is a feature of Kerberos to work in...