if you're on appache use .htaccess (google for more info).
If you're on windows you can do it by not giving IUSER permission to the admin directory. Then create specific user accounts with access to the admin directory. Then give the client the user names and passwords.
