What is the risk of turning this setting on?  Does it really send my
password (over the internet) to thte destination web server?  Could someone
on the webserver end hack this password and use it to infiltrate my network
(let's assume that some one does have the ability to hack ...

I have a web app that I wish to limit execution access to a universal
security group during beta test...
I've tried restricting permissions using ntfs, the virtual directory
and the net.config file (which I assume will not work as this is not a

I am a complete novice who is trying to set up IIS on Win2k Server to
do some testing. I have created a test page named index.html and put it
in wwwroot. The machine name is TestServer. When I enter
http://testserver in IE on TestServer I get the error "You are not