You have to restrict access to a few folders and files. you can do that by disabling anonymous access on IIS on the following folders /files as described here:
admin folder
login folder
shell folder
default.aspx page
The links shows you how to disabled that as well
