Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

On a linux box using .htaccess you can deny access to folders etc... and when the user attemps to visit that directory/file, a window pops up asking for username/password.

How would you do this on iIS 6?

share|improve this question
up vote 4 down vote accepted

In the IIS MMC you could do the following:

  • Navigate to a website
  • Right click click in a folder
  • Choose "Properties"
  • Choose "Directory Security" tab
  • Click "Edit" under "Authentication and access control"
  • Uncheck "Enable anonymous access"
  • Check "Basic Authentication"

Then add a local Windows account and add that user to have "Read" access to the directory using normal NTFS permissions.

It will prompt for a password and the Windows Account credentials will let you in.

share|improve this answer
perfect. Thanks man. – Jack Marchetti Apr 18 '11 at 16:15

I've used IISPassword in the past with great success. I believe that this will work with IIS6.

UPDATE: just checked and it does work on IIS6 - no updates since 2009 though...

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.