Any way to setup iis 8.5 to check for file permission before passing to Coldfusion 10?

Hi,

We are encountering an issue with Windows Authentication.  Static pages like html, txt files are ok but for cfm pages, Windows Authentication is not taking effect.  The problem seems IIS is not checking cfm file permissions before passing to CF for processing.

Thanks,

CC