>>> I am guessing that the App_Data folder is protected against http
>>> requests because of the files that are supposed to be stored there.
[quoted text clipped - 9 lines]
>
> Are you using any access restrictions in the web.config file?
None
> Until a user is authenticated they cannot access restricted folders.
Well, I'm fairly new to web programming but from what I've read, IUSR is
first routed through IIS as an anonymous user (since I have anonymous access
turned on) but I've also set "<identity impersonate="true" /> in my root's
"web.config" file. This should ensure my app is in fact running under the
IUSR account instead of the ASPNET account on my XP box ("Network Service"
under Win2003 Server). I don't know why it can't access "App_Data" however
since I've given IUSR the proper rights. As "Mufaka" alluded to in his post,
it looks like there's some other security issue at play (related to special
folders like "App_Data") but I can't find the details so far.
> And I agree with the last poster...I would not put images in the App_Data
> folder.
I had no plans to but was just testing there when I couldn't get it working
anywhere else. Terminating and then restarting "aspnet_regiis.exe" fixed
that however as per my last post (for IE anyway - Firefox still refuses to
work in the VS environment but it does work outside of VS - go figure).