[chrishajer]

If you are using an Apache webserver, you can use .htaccess with basic auth to require people to enter a password before they ever see the forum installation.

http://www.apacheweek.com/features/userauth

Not sure how to do it on a Windows server.