directory security: medium, but setting it to low security doesn't change anything.
script source access is allowed.
Anonymous Access is allowed, and if i remove "allow IIS -authorization" (it's in german, I don't know the complete text)
the network-authorization popup is gone.. but then it's automatically 'forbidden' 🙁