I got several replies to my question, and looked into NTLM with squid
and samba 3.0.2a. Samba can be odd at times but I was able to get it to
join an ADS domain and now IE users are authenticated this way.

Thanks for the replies, this did just the trick and works great.