1) All files needing to be restricted need to be in a directory by themselves. You can have a multiple of these subdirectories, but any file in the directory will have the same restriction applied to them. If you have two sets of restrictions, you will need two different directories (such as one set, ANY JMU user and another set, only certain JMU users)

2) In the subdirectory, there must be a file named .htaccess (yes, it has a "dot" in front). It must be named this. The following are two examples of how to use the .htaccess files.
Note: the #'s indicate comments and are ignored when the file is processed

To allow ANY JMU user, the content of this .htaccess file should be:

To allow certain user(s), the content of this .htaccess file should be:

AuthName 'JMU E-mail System'
AuthType Basic
# only allow certain JMU users,
# specify each user to allow
require minniccr
require jeffrijx


That is all there is to it -- any file in this directory will get the restriction listed in the .htaccess file.