@lazycoder It's IIS on W2K8 so there's no IUSR_MACHINENAME, but I did check permissions on the usual suspects. I cry foul to ISA guy now.