Most Windows hosting providers don't provide anywhere above the web root that you can get to via FTP - you'll have to settle for putting the Members directory and friends inside the cgi-bin.
There are two different documents on permissions because there are two different areas where permissions apply - there's permissions inside IIS, which govern if IIS will allow scripts to run, and there's permissions on the filesystem. Both must be set correctly.