Network::Windows::IIS Authentication

How IIS Authenticates Users
This looks like a good article. It even includes some packet level trace examples.
http://support.microsoft.com/default.aspx?scid=kb;[LN];264921