In terms of security, I meant

the privilege to "execute" rather than read and write.
I also meant that if there is a setting in IIS to limit loading ASP files within specific folders only.
Check Check