When establishing security policies it is critically important to keep in mind the need for the IUSR_ (or, the NETWORK SERVICE account or ASPNET account if applicable) Internet browser account to have read permissions for all files involved in the web site, including the .map file used as well as any database files used for linked drawings or linked tables.