This is a good article, example code how to protect your files using BASIC authentication in IIS7. This articles shows how to protect asp, html, aspx files. The code has been updated.
http://www.iis.net/default.aspx?tabid=2&subtabid=25&i=942 Enjoy and check out
http://www.iis.net