You can manage Internet Information Server by the Microsoft Management Console. If you have IIS installed you can find it on your start menu under Internet Service Manager. Once the Management Console is open you can add a server to the Console if the one your application is on is not already there.<BR>When you find the directory that is your application right-click on the file and go to properties. One of the tabs is Directory Security. That's the one you want. Click the "Edit" button under Anonymous Access and Authentication Control. You have three choices one of which is Windows NT Challenge/Response. Try that.