Second Level authentication...suggestions pls

[Brad-]

Hey All, Just wanted your opionion on what a simple way to accomplish the following would be.

I have a website, duh, with a purchased SSL cert, and it is currently set to disallow unauthenticated users, so they put in a PW to get to the site.

How can I, on top of that, have another passworded section within teh website. I have 2 admin pages that I dont want regular users to get to.

So far, I have added a general user to the server, made a new directory and taken NTFS permissions from that user...but they can still see the page, unless I take all rights from the, and I get an Unhandled Exception error on the server. I have also tried making a virtual directory, same faults.

Any other ideas? Btw, these are .aspx pages.