iis security: just recently added 2000 server and now when trying to
access secure website we get the above message. It states
to look at the acl's but where in the system do we check?

[quoted text, click to view]

ACL is the formal name for "permission" -- they are on each
file or directory and can be viewed with Cacls or Explorer
properties\Security.

You can also enable Auditing of on Objects & Files and use
Explorer to set properties\Security\Advance\Audit FAIL on the
whold drive or specific areas: Audit Everyone:FAIL

Then use Event Viewer on the Security Log to see a list of
failures (you can use View\Filter to focus on these events.)