If you're able to save a file outside the Netweaver webspace, you're security settings are NOT configured right .. I'd enable the local machine FTP server in windows and use the FTP action block to save files wherever that FTP root (or directories under) is being set to.
What about someone trying to overwrite system files with MII?
Regards,
Paul Radulescu