In IIS (Win2K), I've disabled anonymous access for our internal time tracking app I'm building. Right now, when a user hits the site, they get the log in (unless they are viewing it internally), then ...