A question

If i wanted to protect the part of my web content (working with IIS) and i'd like to avoid stuff like system users or to set NTFS access for the folder i want to protect, what do i need to do?

You can try some authentication package like authentix, I guess, or write some asp authentication code yourself. But to protect images, doc files and other non-asp files from direct access you'll need to prevent anonymous browsers from accessing these files, and the only way I know is to use windows authentication.

You could write a page that retrieves the desired content, and checks to see if they are authenticated first.

For example: Put your content in a secured folder.

Make your links in the form GET_CONTENT.ASP?doc=whatever.html

The GET_CONTENT.ASP checks the querystring for the desired document, verifies the person is "authorized" by using whatever means you choose, then uses the File Scripting object to read the file from the secured folder and deliver it to the browser.

Actually, creating a GET_CONTENT.ASP file is quite simple.

Try something like this...

<%
'Authenticate your user and set a session variable of UserLoginOK to True

contentpath = "d:\inetpub\uclroot\misc testing\"
fileContent = rfile(contentpath & request.querystring("doc"))

if not session("userloginOK") then
select case right(request.querystring("doc"),3)
case "htm", "html", "txt"
Response.write fileContent
end select
else
response.write "Not authorized..."
end if
response.end

'The rfile() function reads a file and returns a string variable with the contents of the file
Public Function rfile( filename )
Set Sys = Server.CreateObject( "Scripting.FileSystemObject" )
If Sys.FileExists( filename ) Then
Set Txt = Sys.OpenTextFile( filename, 1 )
msg = Txt.ReadAll
Txt.Close
Else
msg = "FAIL: File does not exist."
End If
Set Sys = Nothing
rfile = msg
End Function
%>

If your content is straight HTML, this should work fine. If you have binary content like PDF and image files, you would need to adapt it to write headers for PDFs, images, etc with additional case entries.