If the direct path is not working, it seems something is not set right on your web server. The direct paths are not handled by Kentico URL engine. How does the 404 looks like? Is it from Kentico/your custom error page or standard IIS 404 error page?
What is the difference in the IIS setup, disk permissions, application pool identity?