Equivalent to .htaccess for IIS ?

[sde]

I'm trying to simply password protect a directory on a Win2k/IIS 5 Server running running PHP/MySQL.

I've done it on my home system before by tweeking some share options, but things don't seem to work the same here from work because we are on a big network domain.

I need it to popup a user/pass when someone tries to access that directory via a web browser. It can be windows authentication or otherwise.

Any ideas?

[sde]

well i believe it is because we are running php as a cgi module. this makes it so that if we delete the 'internet user', and only enable the users who we want to access, it disables the ability for the server and php scripts to access itself.