Bound by timescales, and wanting to password protected one directory on our website I setup the website to allow Anonymous access and Windows Authentication. I then created a Windows User and gave them file permissions to the folder I wanted to restrict and removed the IIS User. This all worked fine...