1. Create a local user with password on your webserver 2. Modify the NTFS permissions on the files/folders you want to restrict access to so that only your created user has read access to it 3. When browsing to your protected file/folder, you visitors will be asked username & password if you're not able to physically administer your server, ask your hosting provider to set the permissions....