What sort of authentication are you using on your windoze environment? Have a look at external-authentication, it might be the base of the solution you are looking for but AFAIK there isn't a single-signon (ala M$ passport) implemented yet. You could have a look at CAS from Yale?
Good luck and if you implement this solution on OpenACS, keep us updated!
