Microsoft Proxy Client Authentication

I’m on an NT Server and I have a Proxy Server with internet access. I’m setting up the microsoft proxy client on individual NT workstations so that authentication is anonymous and only those in a specific domain can access the internet. How do I configure the server to provide seamless authentication while excluding those not belonging to the entitled group? Thanks!