the eroor you are getting can be caused by two issues, well I know of two, there may be more.
1) loss of session state to popup. If the session variable CESecurity is not pressent then you cannot get there (include_security,asp)
This session variable in a propertybag that contains all of the pathing information to the popup
2) the second is that you may not have the right permissions set to those directories.
What I would suggest is to add temporarly the following line inside include_security.asp
response.write Session("CESecurity")
shut down your browser, restart it clear the cashe, the try it again and see if you get the same results
RC