I want to allow a group of users in my workplace to be able to create a Folder (...\wwwroot\website1\<new folder>\). This is because they will be using a third-party survey tool that sends the survey up to the web server. I will need to put each survey in a separate folder on the server. Now, my question is, what is the best, most secure way to approach this? Should I be allowing anyone to create folders under the wwwroot at all? Is this not too smart? Is is okay? Would it be a good idea to use the .NET version of the FileSystemObject on a page to create the folder? Is this a bad idea all together?