Here's hoping that someone will find this information useful when working with the IIS Lockdown Tool, FlexWiki and Reporting Services. If the URLScan filter is set to a fairly restrictive level, neither Reporting Services or FlexWiki will work (returning constant 404 errors). I found helpful advice at the following pages: