Does everybody have access to the folder where the HTM page is residing?
Also, in IIS, what is the security setting for the virtual directory
pointing to that folder? If it's setup as Anonymous, then there should
be no logins. But if it's setup as either Basic or Integrated, then a
login is required.