How to change access settings in IIS-7?

I have an IIS-7-hosted website which is accessible by everyone (public domain), and it has several applications inside it. But I want only some of these applications to be accessible by everyone. The others must be accessible only through my company's local network. How can I do开发者_JS百科 this?

You can control access to your sites be enforcing authentication and authorization rules on your private applications.

However...

I strongly recommend running Intranet applications and Internet applications in separate IIS web sites, and use your network firewall to prevent all Internet access to your Intranet site.