server.mappath, permissions at the root of the drive

[Blake]

We are using the server.mappath method. The folder structure looks like
this:

D:\inetpub\wwwroot\appfolder\admin\file.asp

NTFS permissions on D:\ are set up to allow 'admins' and 'system' full
control on D:, nothing else (I removed the everyone/full long ago). The
wwwroot folder has NTFS perms for IUSER and the authenticated users.

When the page is hit, I get a security log saying 'IUSER failed trying to
read D:\' or something similar.

Is this normal behavior? Has anyone seen this before?

Thanks
Blake

 

[Ray at]

Can you show your code? Are you doing something like
Server.MapPath("../../../../") or something?

Ray at home