IIS settings – Enable directory listing and Basic authentication

Folder settings – Reject directory access permission for IUSR

A quick note in case I forget it again…