ColdFusion MX: Implementing NT Authentication for ColdFusion Templates with IIS Web Server
When Macromedia ColdFusion MX or MX 6.1 is used with Internet Information Server on Windows, if you want to restrict access to OS protected files, you need to make IIS check the file access permissions instead of relying on ColdFusion. To do this, you must configure IIS to check the file permissions before passing control of the request to ColdFusion. This is a change in behavior from ColdFusion 5.
This Technote contains instructions on how to set this configuration up.
ColdFusion MX: Implementing NT Authentication for ColdFusion Templates with IIS Web Server