ok....
this is what i tried:
<Directory /wwwroot/privateDir>
AuthType Basic
AuthName "Restricted Files"
AuthUserFile F:/Apache2/var/somepwdfile
Require user someuser
</Directory>
i created the somepwdfile using the htpasswd.exe that came with apache, and tried both with the password SHA encrypted and plain text. i stopped, restarted apache...and still i'm getting the forbidden error:
Forbidden
You don't have permission to access /privateDir/ on this server.
did i miss a step?