I set up a new virtual folder on my website and whenever a user tries to access anything in this folder (an asp script in this case) it prompts him/her to login (using the standard microsoft popup of username, password, and server). While it is true that I can log on to my domain with the administrator account using this method and then I can view whatever I like, I want users to be able to view things in the folder without having to know my administrator password (obviously). I have the virtual directory permissions set to allow reading and script execution, but I still can't access it from the web. I can access stuff in the main directory just fine from the web.