by default it'll be in the [i]<install dir>[/i]/domains/[i]domainname[/i]/config/. File I/O requires modifying you server.policy for the domain, or you just have to disable the security manager.
[Message sent by forum member 'madgame' (madgame)]
http://forums.java.net/jive/thread.jspa?messageID=270814