This article was previously published under Q288309
This article has been archived. It is offered "as is" and will no longer be updated.
In Microsoft's "Secure Internet Information Services 5 Checklist," available at http://technet.microsoft.com/en-us/windowsserver/2000/bb735378.aspx, there is a recommendation to disable "parent paths". But if parent paths is disabled on the Application Center 2000 Admin Site in Internet Information Services (IIS), the Microsoft Management Console (MMC) will return the following error message:
ASP error 0131 The include file %filename.ext% cannot contain '..' to indicate the parent directory. /%path%/%filename.ext%, line %number%
Microsoft Application Center 2000 Setup explicitly sets Enable Parent Paths. This is how the Application Center Admin Web site is structured. All directories are referenced via relative links. If the user changes the setting later, it will cause the user interface not to function.
The Parent Paths option allows you to use ".." in calls to functions such as MapPath. By default, this option is enabled. Use the following procedure to enable the option if it has been disabled:
Right-click the root of the Web site, and choose Properties from the context menu.
Click the Home Directory tab.
Click the App Options tab.
Select Enable Parent Paths.
For additional information, click the article number below to view the article in the Microsoft Knowledge Base:
226474 Err Msg: Active Server Pages, ASP 0131 Disallowed Parent Path