Are there any rules of thumb regarding creating executable directories?
Mark all directories that you want to be executable as such, during site creation time, rather than at a later date when the sites has a great deal of content. When a site changes a directory to executable, all sites on the box are unavailable while the server rebuilds the index base of virtual roots. This can produce especially unpredictable results if a client tries to run an ASP executable during that time.