You can use the GetUserName API to get the userID of the person logged on. You know they're an NT user with a valid password since they're logged on, and since you're reading their ID (without their intervention), you know that the person is who they signed on as. So their password becomes a mute point.

Hope this helps.