Question The site made me start a new question stating that there were too many follow ups.
They don't use Remote Desktop. They just access the Intranet web pages through their own browser. I have been given this daunting task of eliminating the VPN device and creating a custom logon screen that uses Windows authentication without having the Windows username and password dialog that pops up.
Answer Ok, from my point and using asp you will have to go down the LDAP root. I think you will need to set up a generic windows account which has read access.
Say your page is login.asp go to IIS and select the file and change the security under the anonymous user add the generic account instead of the IUSER account. This will now allow this file to read Active directory. Setup your page how you would with any other login screen. Have look at this code snippet, this should get you started.
This is probably the route I would go down, see how you get on, if you have any problems let me know. The other route which I imagine is much easier is asp.net alot of these functions and classes are built in.