MAC to Windows Domain Login

i'm 99% sure you can't force this and the reason is pretty simple.  It would be a rather large security hole if any machine 'automatically' authenticated to the domain.  Why have security at all if any machine is 'automatically' authenticated???

Exactly. Which is why my question is asking how I can force authentication. It doesn't look like the user is fully logging into the domain. I have changed the user's domain pw but it still allows him to log in with the old one.

Essentially I want to force the user to log in to the domain with the domain username and password. Just like a Windows XP machine.

my bad,,, i missed the word 'not' in your question.

how exacly is this MAC authenticating to the domain?
even after you changed the password, was the MAC user able to access domain resources?  Or did they just get in with the MAC equivilant of cached login credentials.

I configured the MAC by clicking GO > Utilities > Directory Access
I set the AD forest and domain then bound it. This looks like it worked because I tried a bad pw for the administrator and it knew it was wrong. It let me "bind" with the right password.

The user is still always prompted to access domain resources. I've found that I can access shares with the local user password or the domain password.

It's been awhile since I worked on a MAC inside a Windows Network, but I think there is a Microsoft Client that needs to be added in order to get the Authentication boxes.

Oh - I forgot to mention - if you're not getting a logon prompt on startup, go to System Preferences - Users.  The default behavior of OS X is to configure the first user account to auto-logon every time.  You can disable that there.