how to set up client management instead of session management?

Hi, i have been stuck on this for a week!
I have been learning cf and have come accross this tutorial which includes site security by specifying roles for different users.
The main problem is setting up the cfparam name tags to suit my site.
The tutorial application cfm file has this:
<cfparam name="Application.dsn" type="string" default="security">
<cfparam name="Application.webRoot" type="string" default="/securityBACK/">
<cfparam name="Application.machineRoot" type="string" default="/castlefnord/securityBACK/">
<cfparam name="Application.cfcRoot" type="string" default="castlefnord.securityBACK.com">

My server running locally on iis and so the path from the server is c:\inetpub\wwwroot\SunshineRoot
The components folder is:
c:\inetpub\wwwroot\SunshineRoot\com

I dont understand what webroot is or machine root? Can anyone help??? Please!