I also had this problem, changing the security settings for the IIS_IUSRS user to full control. The read-only field will still be checked (most likely because CREATOR OWNER cannot gain full control), but IIS processes will be able to write files to the destination directory. I agree that this is a nasty problem, because the code will work in Cassini, but not on the server.
source
share