Right I can either choose to use Allow From and specify the ip address, OR, if the server is part of the same domain, simply enable integrated windows auth?
If they are not on the specified ip, or if their domain credentials do not match, they should just be prompted for the username and...