If all the users share common files, you should consider using basic HTTP authentication... this is fast and is pretty good security wise.
check the IIS help manual for information on password protecting directories.
or you can do it the PHP way. i don't know any good tutorials off the top of my head, but I'll list them here in a little while when I do find them.
I'm certain many others know good tutorials!
-sridhar