Thanks Doug G. I look after a couple of IIS 6 web servers at work and have changed the setting you mentioned. This did work. However, I'm looking for a way round this with my 'home use host' 2020Media. Is there a hard code alternative that I can use to save the agony of persuading my host to change their settings? Why have Microsoft set this default? Security I guess!?
By default in IIS6 parent paths are disabled (they were enabled by default on earlier versions). Yes it's been done for security reasons, there was quite a nasty little exploit or 3 involving "../" in the past.