Hi folks.

I am using II5 on Windows 2000 server. Our web app outputs reports to PDF files into a folder on our webserver. In order to navigate to the PDF files to display them, I went into Internet Services Manager, right clicked on the folder then in the Directory tabe of the dialog, put a check mark next to for Read Access. Work great. Little did I realize that this folder allowed anyone to access the folder even if they didn't authenicate via our web application.

How can I change this so that it:
- let's authenticated users access a particular file (not browse the foler)
- locks unauthenticated users out