what is best practice to solve this issue... also we donot want's hackers can
able to write to this folder..

i am uploading a file using ASP.Net C# to folder ...and i should give .net
account access to that folder.

1) what is best practice to grant write access to that folder so it should
be not volurenable against security threats


full error message is below...



Server Error in '/BestPortal' Application.
--------------------------------------------------------------------------------

Access to the path "C:\Inetpub\wwwroot\BestPortal\Doc" is denied.

ASP.NET is not authorized to access the requested resource. Consider
granting access rights to the resource to the ASP.NET request identity.
ASP.NET has a base process identity (typically {MACHINE}\ASPNET on IIS 5 or
Network Service on IIS 6) that is used if the application is not
impersonating. If the application is impersonating via <identity
impersonate="true"/>, the identity will be the anonymous user (typically
IUSR_MACHINENAME) or the authenticated request user.

To grant ASP.NET write access to a file, right-click the file in Explorer,
choose "Properties" and select the Security tab. Click "Add" to add the
appropriate user or group. Highlight the ASP.NET account, and check the boxes
for the desired access.