If you are using the windows account user, wouldnt they arleady be authenticated to your network?

If you are allowing the app login to be different then the current windows user, how would you want to authenticate it without a password?

I have some coding examples that will authenticate a user with the networks active directory but not sure exactly how you want to prevent anyone from signing on as Ben without a password.