I was able to get the authentication using Active Directory with DNN 4.0.2. What I would like to see if its possible to change the following behavior:

Right now when the user enters the web address http://myserver/DNN (which is my intranet site) they get prompt for "user name and password" .

What I would like to happen is:

when they type the web address to be able to see the website and when they click on the "login" button have the authentication proceess to occur.

Can that be done or may be I miss something?

Thank you in advance for your suggestions.

Thank you nitro001 for your response.

I do understand how the current authentication works and I have it working properly, but this is my problem.
I work in a hospital environment and most the nurses sign-on to the computer using a AD generic account (ex, username=nurse). Now the problem is "how do I restrict these generic accounts?" If I do them they won't be able to get to the intranet and I also don't want them to use the generic account on the intranet because it would be hard for me to track who wrote a posting or upload something that may cuase hospital damage.

My original questions (which I probably didn't explained well) was:
Rather than using the windows loacl machine (AD account) username/password to be promt as they
enter the website address, have the user be promt as soon as they click on the "Login" link on the intranet site for the authentication to take effect. I don't want the user to log-on automatically but I do want them to reach the site and be able to navigate and do the authentication if they need to navigate to certain pages.

I hope that this time my explanation makes any sense .
Thank you in advance for your responses.

I don't think that will help him, as accesssing that particular URL will "automatically" log the users in using their AD account. 

If you need a "mixed-mode" sign-in, you'll have to comment out the DotNetNuke.HttpModules.AuthenticationModule line in the web.config file.  That will prohibit "automatic" logins, but you still have that option if you access the windowsignin.aspx URL.