Hello, I&#039m trying to restrict user access to some zip files, so I removed the IUSR account from the access list, and used the response.redirect method from an asp page to allow people to get those files.<BR><BR>The url I&#039m redirecting the users to is using the following syntax : http://username:password@nameofthefile.<BR><BR>If I type the url in the address field of my browser, it works fine, however, when I try to access it with the asp page, I get an authentication messagebox asking me to fill the username/password fields.<BR><BR>Has anybody an idea why this is the case ?