Would it be good practice to have IIS up and running but "physically" seperate where you are loading your site by creating a seperate partition and using a virtual directory to point to it, or would this just be a misguided effort at locking down folders and drives. My theory is that since its not in the same file tree it would thus make the enviroment more secure. Thanks in advance!