Would it be wwwroot, C, the root virtual directory where the assets are hosted, or the same folder that the assets are in?
Meaning if I have a virtual directory 'virdir' with a sub directory 'swf', which is really like C:\somedir\assets\swf\, where would the crossdomain.xml need to go so that my swf app on a different server can access the swfs?