Cannot Disable Parent Paths in IIS 5.1

I have configured my IIS to disable parent paths but it has no effect.

The following traveral still works:

http://localhost/eeweb/Framing/../accesscontrol/logon.asp

There seems to be no mention of this behavior anywhere. I have checked that
the logon.asp in question is in fact the right one and in the right
directory. Both directories are under wwwroot. OS=Win XP 2000

many thanks for any help,

Jeremy

It does work if done at deafult website level but not at individual
application level. Is this a "feature"?

"Jeremy Bushell" <jebbushell.RemoveThis@toast.net> wrote in message
news:OEQhPSOREHA.1160@TK2MSFTNGP09.phx.gbl...
 > I have configured my IIS to disable parent paths but it has no effect.
 >
 > The following traveral still works:
 >
<font color=purple> > <a style='text-decoration: underline;' href="http://localhost/eeweb/Framing/../accesscontrol/logon.asp</font" target="_blank">http://localhost/eeweb/Framing/../accesscontrol/logon.asp</font</a>>
 >
 > There seems to be no mention of this behavior anywhere. I have checked
that
 > the logon.asp in question is in fact the right one and in the right
 > directory. Both directories are under wwwroot. OS=Win XP 2000
 >
 > many thanks for any help,
 >
 > Jeremy
 >
 ><!-- ~MESSAGE_AFTER~ -->