Here I am, just sitting at home and I get the good idea to create a web server on my system where I can access my MP3 files, audio books, family pictures. However I set it so I can authenticate so that nobody can just access it using basic authentication. Anonymous authentication is turned off. Here is my folder scheme. I have it set up so that each of these folders have the IIS_user group in the security with check boxes next to List folder contents, Read, Read and execute. My user is part of the IIS_users group.

* means folder

->wwwroot
-->index.htm
-->images*
-->audiobooks*
---->audiobook.htm
-->MP3*

My problem seems to be with permissions. If I open my webpage on an externally networked system it asks me to log in. I put in my user name and password, and sometimes the index page will come up. Sometimes it will ask me for a username and password over and over, until it finally gives me a "you do not have permission to view this page..."
like I said before, I can sometimes access the main index perfectly however if I try to goto some other links it will ask me over and over again for my user name and password until finally it says "you do not have permission to view this page"

I am very new to IIS; I just wanted to mess around a little bit to improve my skills. I love to learn new things. Is there any kind of permission auditing tools available or any documentation available where I can read up on what I am doing wrong?

Any suggestions and likes would be appreciated. I am using IIS 7.0 on vista