JSI Tip 3821. How do I use NTFS security to protect Web pages hosted on IIS 4.0 or 5.0?

Move the page or pages that you want to protect into a separate folder, taking care to update your hyperlinks if necessary. To do this, follow these steps:

Right-click Start and click Explore to open Windows Explorer.

Click the content folder that contains the page or pages that you want to protect.

Right-click the folder, click Properties, and then click the Security tab.

Remove the Everyone group from the list of names in the top pane.

IMPORTANT: Do not remove SYSTEM.

Click Add.

Type the names of the users or groups to whom you want to grant access to the page.

Click OK. Note that these users and groups must already be part of the domain in which the Web server resides. If they are not, you must add them before you proceed.

If you are prompted to choose from multiple instances of the name, choose the one or ones to which you want to grant access. Click OK.

In the top pane, select the user or group that you just added and then select the permissions that you want to grant in the bottom pane. Generally Read and Execute permissions are sufficient, but in some cases you may wish to grant Write or Full Control permissions.

Click OK.

Move the page or pages that you want to protect into a separate folder, taking care to update your hyperlinks if necessary. To do this, follow these steps:

Right-click Start and click Explore to open Windows Explorer.

Click the content folder that contains the page or pages that you want to protect.

Right-click the folder, click Properties, and then click the Security tab.

Click Permissions and select Replace Permissions on Existing File.

Remove the Everyone group from the list of names in the top pane.

IMPORTANT: Do not remove SYSTEM.

Click Add and type the names of the users or groups to whom you want to grant access to the page.

Click OK. Note that these users and groups must already be part of the domain in which the Web server resides. If they are not, you must add them before you proceed.

If you are prompted to choose from multiple instances of the name, choose the one or ones to which you want to grant access. Click OK.

On the Type of Access list, select the appropriate permissions. Generally Read and Execute are sufficient, but in some cases you may wish to grant Write or Full Control.

Click OK.