If you use a NT server with IIS, you can use the NTFS permissions, this is the easiest way to do it.

It always depends on what you want to do ! You could always use ASP, PHP and all kinds of other server side scripting and make sure you always check for a open session for the user to get the other pages in you web site structure or else anyone that as a direct link will go through without the password request !