Use the location node in the web.config to deny access to the folder.

Code:
<location path="myfolder">
<allow roles="admins" />
<deny users="*" />
</location>