I have included both the meta tag and the file at root level but still comes back with site not verified asking to put the file etc in root folder.
Having done this kind of thing for google stats etc I am reasonable sure it's all in the right place. I'd appreciate someone checking why norton doesn't find what I have done.