IIS 4.0 Question

Is there any way to restrict the permissions a network user has to a directory containing a web site in Windows Explorer using NTFS without putting some type of access control on the site itself when someone attempts to view it across the Internet?

What I’m trying to do is give the developers on the network access to the directory containing the files and restricting everyone else’s’ access, but without putting restrictions on the site itself across the Internet.

WhenI have done this in the past, it denies access to those trying to view it across the Internet or prompts them for a password, even though I have allowed anonymous access to the site.