Are you running from a local server i.e. on your home computer, or a web host? Unusual for a web host to have an absolute path beginning with c:/...

Anyway, the .htaccess file goes in the directory you are trying to protect. The .htaccess file contains the path to your (hidden) .htpasswd file. The password file can go anywhere - just make sure it's hidden.

Hope that helps.