Server-side include directives (#include) return 404 error (for .stm files) or 0131 error (for .asp files)
Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1
If your ASP page uses the #include server-side include directive and the ".." notation to refer to a parent directory, the directive will return an error unless you have reconfigured the AspEnableParentPaths Metabase Property. This property is set to false by default.
Important
If you set the AspEnableParentPaths property to true, a potential security risk is introduced because an include path might access critical or confidential files outside of the application root directory.
Procedures
To enable parent paths through IIS Manager
In IIS Manager, expand the local computer, right-click the starting-point directory of the application you want to configure, and then click Properties.
Click the Directory tab, and then click Configuration.
Click the Options tab.
In the Application configuration section, select the Enable parent paths check box.
Click OK.