I know that by defualt IIS won\'t server App_Data or bin folders content to the public. How to set one more folder to don\'t server to public?
Remove IIS_IUSR permissions from that folder.
I think its generically under the "Internet Guest Account"