Permissions issues

Hi,

We have the following problem here...

Our web developper is creating an ASP website for us. IIS is running on one
of our Windows 2000 servers, and I created a new virtual directory in IIS
for him, next to our existing Intranet virtual directory. So far so good.

A few users need to have more options on that website, so we created an AD
group (adminaspweb) and the ASP developper is using that group weither or
not to show the extra options in the ASP website. All the other users just
need the standard options. In order to achieve this, we have enabled
Integrated Windows Authentication and disabled anonymous access. So far so
good.

Now, I wanted to share the website's folder, so that the developper can
access it from his own computer for uploading new versions (instead of
sending the files to me, and I put them on the folder that the virtual
directory is pointing to). In order to limit access to this share, I've
limited NTFS permission (otherwise every user can just browse to this folder
via the filesystem). I gave only the local administrators group + ASP +
adminaspweb (=the developper + a few people) write access, and IUSR_ read
access to this folder.

However, only the people from the adminaspweb group can access the website
then (the others get a prompt for a password). This seems to come because
of the integrated windows authentications: normal users can't access the
share anymore.

So I enabled anonymous access, and then they can access the site again.
However, now the ASP program can not tell anymore who is consulting the
website! It seems that anonymous access has priority over integrated
windows authentication?!?

So I need to disabled anonymous access... But then I need to give all users
read access to the shared folder, and I don't want that, because I don't
need them to see the asp files...

Idealy, for normal users the folder should be accessed with the IUSR_
account, and for users from the adminaspweb group, their windows logon name
should be used. Can I achieve this?

What a long explantion Hope it's a bit clear, and I hope anyone has a
solution for this problem...

Thanks!