private IWebOperationContext context = new WebOperationContextWrapper(WebOperationContext.Current); // Get the context

context.OutgoingResponse.StatusCode = HttpStatusCode.Unauthorized; // Set the 401

throw new WebFaultException(System.Net.HttpStatusCode.Unauthorized);

HttpContext context = HttpContext.Current;
context.Response.StatusCode = 401;
context.Response.End();