In IIS, open up the properties window for the directory you want to protect. Click "Directory Security" then under authentication control, click "Edit". Make sure "Anonymous" and "Basic" are unchecked, and that "Integrated Windows" is checked.

To allow all AD users to connect, you still have to remove the anonymous web users from the directory. Then, add your Domain Users group with Read permissions.