The recommended way to protect non-ASP.NET content is to map the file extension to the ASP.NET ISAPI.
http://weblogs.asp.net/scottgu/archive/2007/03/04/tip-trick-integrating-asp-net-security-with-classic-asp-and-non-asp-net-urls.aspx
http://support.microsoft.com/default.aspx?id=893662
While this works great with .doc and .ppt files, I'm finding that this does not work with .docx or .pptx on my servers (W2K IIS 5). The files are served back but instead of opening, here's what happens:
... and when I click "Open" I get ...
Is this something in my configurat ...
Go to the complete details ...