I have a windows 2000 webserver for my sites.

I have and admin section to the site where images are uploaded. The pages in that section are password protected but the folder still has add delete and modify permission on it for the iUSER account so things can be uploaded. Is there a better wy to protect that folder?

(I'm definitely not a network guy, but)

There's only one user accessing the files on the site - iUSER. So, i assume from an NT perspective, you have no choice. An intranet may be different, but not the web.

Just wondering what I have to tell my web host to do so this works.