Your page is running under the aspnet account for the aspnet_wp process, you
can either add that account to the folder you are trying to access or use
impersonation add the following to your web,config (<!-- Enabling
Impersonation-->

<identity impersonate="true" />) and allow the appropriate permissions
to the folder.



That line in your web.config will make the user viewing the page run the
aspnet_wp process i.e.



If carlosm hits your page the process aspnet_wp will run under carlosm sec
credentials