I need to get to a point where my routers ask me for a user and password after I've entered the "enable" command. like this:
Can anyone help with this?
You can't do that, but you can configure the router so it prompts for name/password at login, and based on the user's privilege, they will be in enable mode or not. So instead of a two-step login, they login once and are put in the proper mode.
username farouk password foo
username jong-mee password bar privilege 15
aaa authentication login default local
aaa authorization enable default local
When jong-mee logs in, she gets prompted for her password, and immediately goes into enable mode. But when Farouk logs in, he is only in user mode.
Make the enable secret long and complicated so it can't be guessed. You won't have to use it anymore.