create a "help" domain user account. restrict the nuts off it using group policy. now people can login with this "help" account and access the intranet.
You can probably do what you want by creating a custom GINA.dll. See http://support.microsoft.com/kb/810756/en-us for where to start.