Restricting Web Access to a Directory in Windows IIS6

You can password protect a directory on your Windows hosting account by removing the "Read" directory permission for that directory. The result of removing this permission is that you can only access that directory using your hosting account's primary FTP user's user name and password.

This process restricts directory access to the primary FTP user only.

To Restrict Web Access to a Directory Using the FTP File Manager

1. Log in to your GoWebsite account.
2. Click Web Hosting.
3. Next to the hosting account you want to use, click Manage.
4. From the Tools section, click FTP File Manager.
5. Select the appropriate existing directory or Create New Directory.
   1. If creating a new directory, enter the directory name.
   2. Click OK.
   3. Select the new directory.
6. Click Privacy menu.
7. On the Permissions tab, make sure Web Visible is not selected.
8. Click OK.

To verify your settings, go to www.yourdomain.com/customdir, where yourdomain.com is your domain name and customdir is the custom directory you just created or updated. When the login prompt displays, type your hosting account user name and password to view the contents of your directory.

Additional Resources

You can also use an ASP script to password protect your directory. This would require a bit of programming on your part. See the User Authentication section at HotScripts.com for some examples.

NOTE TO FRONTPAGE USERS: Microsoft FrontPage manages all directory and subdirectory permissions on your website. If you created custom directories on your website, or you are using another tool to build and or manage your website, switching to FrontPage may cause some difficulties. It overwrites all of your directory permissions and may make your Website unusable. If you have FrontPage Extensions activated in your Hosting account, you will not have access to the Permissions feature in the FTP File Manager section of the Hosting Control Panel.

For additional information on limiting Web directory access, see Removing Web Access to Directories on a Windows Hosting Account.