CGI programs are run as the IUSR account by default, which has very little permissions. In order to have the CGI program create files, you would need to give the IUSR account "write" permissions to the directory where you want the file created.