I have a website which runs under an App pool with identity user X. We have made changes to the website to enable file operations whereby the website creates some temporary files which are then sent to the user via Response.Write. The temp files are created in a folder outside the virtual directory. Is it enough if we give write,read permissions to the App pool user X on the folder location? Or do we need to give some other user permissions as well. Thanks in advance.