IIS Preventing File Download question ??

Hi I'm running IIS 5.x with Coldfusion MX. CF is being started with User A, IIS is being started with LocalSystem and the IIS anonymous user is User C.

Under my web path I have a shared mapped dir for files. I only want users to be able to access these files via Coldfusion, i.e if they are using our web app accessing the files is okay but if they put in the direct link to the file without signing in our app first it denies it.

I can't seem to get the permissions correct and it appears I would only have to assign the CF user perms to that directory and not allow the IIS anonymous user access.


can someone guide me through this as I come from an Apache world and I could have solved this in about 5 minutes there but I'm really struggling with getting this working in IIS. Thanks in advance!