Had a little fight with my local IIS 6 running on a local user account using integrated authentication. It just wouldn’t let me in, no matter what rights I assigned to the user and to the directory.
Apparently this is a known issue documented here which can be resolved by setting a metabase key with the command below.
cscript adsutil.vbs set w3svc/NTAuthenticationProviders "NTLM"