Based on some CB exchanges, I know you're using IIS. What you're probably running into is this: By default, IIS uses an "anonymous user" context when servicing requests. The anonymous user doesn't have access to everything that an real user does.

To change the user context,

1. Start the "Internet Service Manager"
2. Right-click on either the "Default Web Site" or some virtual directory within it, then select "Properties..." from the pop-up menu.
3. Select the "Directory Security" panel.
4. In the "Anonymous Access and Authentication Control" area, click "Edit..."
5. In the dialog, make sure "Allow Anonymous Access" is checked.
6. Click "Edit..." for "Account used for Anonymous Access". You'll see a dialog that shows which "user" is used when serving anonymous requests.
7. Click "Browse" and then select a valid user.

This assumes that you have administrative access to IIS.

I recommend that you make changes on a virtual directory basis, and not for the entire website, until you've had a chance to read up on the implications.