Because you likely have intergrated authentication enabled (it's the default setting in IIS5). Easiest way to eliminate this is to create a virtual directory for that section/directory and set it's ...