Dunno about IIS, but Windows 2000 has the environment variables TEMP and TMP.

# Untested
my $tempdir = $ENV{TEMP} || $ENV{TMP} || die "No tempdir";
$session = new CGI::Session(undef, $cgi, 
                            { Directory => $tempdir });
[download]