Basically the same issue as How to use nginx to proxy to a host requiring authentication? but this time using NTLM authentication. Unfortunately the company IIS doesn't accept basic authentication.
I need to configure nginx to use a single user domain account for all proxy requests. As a result client should not receive any credential prompt.