I am doing a member's area in a recent site with Cold Fusion running on a Windows server. I am implementing security with a simple check for a 'Session.Login' at the head of every page. This works fine, but now I need to add the ability to download binary files like Word.

If this were using Apache, I would probably implement security with a .htaccess file and script the usernames/passwords to a password file. Can something similar be done with IIS? Is there an ability to programably work with username/passwords?