by Bret Miller.
Assuming you don't use http://localhost/... for another site, you could create a new site in IIS that points to your D: drive folder and use host header to restrict it to http://localhost/. That way it would only be accessible from the server itself.