This procedure will block the directories bin, database, and emails to be accessed through the web server.

1. Run IIS Manager go to: Start > Settings > Control Panel > Administrative Tools > Internet Services Manager
2. On the left panel browse to vso directory or web site selected so will see all subdirectories on the right panel.
3. On the right panel Locate bin directory and right click on it, then select properties.
4. On the properties window Directory tab uncheck Read, Write, Directory browsing and change execute permissions to None.
5. Select Directory Security tab and click on the Edit button from Anonymous access and authentication control.
6. On the authentication methods window uncheck Anonymous access.
7. Run steps 3 to 6 for database and emails directories.