IIS 6 -> Integrated Authentication (Groups) Question

[Borvik]

I have a folder in our website hosted on a Windows Server 2003 box protected by Integrated Authentication.

This works fine.

I want to create a sub-folder that only a specific User Group from Active Directory can access.

For some reason I am finding this difficult. I tried removing all the permissions besides, SYSTEM, NETWORK, NETWORK SERVICE, Interactive, Administrators, and of course the user group in question - but it still appeared as though someone from outside the group was allowed access in. It could be that the user in question had the page cached and it was simply loading the cached page.

What permissions are needed for a scenario like this to work?

Thanks.

 

[Borvik]

I think I got it figured out - I used the Web Administration to create a sub-web and add the user/group that way. It seems to have worked.