deny access to IIS virtual directory

From: David K (noemail_at_nospam.com)
Date: 02/22/05 

Date: Tue, 22 Feb 2005 02:25:17 GMT

I'm running Windows Server 2003.

On the IIS server, I have the local path c:\intranetnews shared as a
virtual directory for the active website.

I have anonymous access enabled for the directory, so that users
aren't prompted for credentials. One global security group, Project
Contractors, is denied access to that directory via NTFS permissions.
Every user can open that portion of the site in IE, including Jay
Adams, who is a member of Project Contractors. Why?

All I can figure is Jay is being treated as an anonymous user instead
of his logon credentials.

If that's the case, the MSPress MCSE book is wrong. This is part of an
exercise that says that given this configuration, Jay should be denied
access.

Thanks,
Dave