Thank you for your reply. IIS is set for 2.0.
Can you tell me, or direct me to documentation that does, which folders and files need which permissions? Currently, all are set to Read, Read & Execute, and List folder contents, except [root]/upload which is also write enabled.
Thanks for your help.