ACtually, to a certain degree you CAN use NTFS permissions to control Apache access to files on your server. Remember: Apache runs as a user (and you certainly better be running it as an unpriveleged user!). You can give/deny permissions crudely by assigning them to the Apache user. This is rough.
The better method, the Apache method, is to create .htpasswd and .htaccess files. .htpasswd (which can be named almost anything) is a file that contains a list of usernames and some encrypted (via crypt()) passwords. .htaccess describes the sorts of access users will have, as well as the name and location of the password file to use. In order to allow the use of .htaccess files, you need to do an AllowOverride in your httpd.conf file, in the section pertaining to the server, virtual server, or alias in question.
All that said, I'd recommend against Apache on NT/2k/XP, if only because it doesn't integrate with the NT's security services.
------------------
--Mik
http://www.404error.com ruhkferret on ICQ/AIM
"Your guy was a little SQUARE! You had to use your IMAGINATION! There were no multiple levels or screens. There was just one screen forever and you could never win the game. It just kept getting harder and faster until you died. JUST LIKE LIFE." --Ernie Cline[This message has been edited by mikhael (edited 01-19-2002).]