The account that ASP.Net is running under needs to have read, execute and list permissions on that folder and all its contents. See http://support.microsoft.com/kb/316721/ and specifically make sure that the effective permissions on web.config are such that the account has access.