I've obviously been playing too much, and for some reason when I access http://companyweb
it asked me for my username and password. Once I give them to it, it works as advertised.
Not all users on my server are asked to login. Some just get the page like they are supposed to.
What have I messed up? :-)