For blocking ports you probably need access to some kind of firewall. I don't know anything about that on windows.

As for forcing a password (I assume you mean, requiring password-based authentication), that's completely protocol and application dependent. For instance, HTTP, SSH, and FTP provide login mechanisms in the protocol (but with different ways of configuring them for each implementation), while finger, echo and DNS don't (as far as I know).

If you have something like PAM you can synchronize your user/password database over supporting server apps, but this is getting way off topic.