There is an option to deny anonymous access, I believe it was under the network properties of ISA. We had to enable that, to force registered usernames.
I can't get to the machine right now, but if you've had no luck by tomorrow, I will have a butcher's.
Carlsberg don't run I.T departments, but if they did they'd probably be more fun.