- The app pools under IIS7 (including the default app pool) need to use the domain IUSR account.
- add the domain IUSR account to each server local security policy:
Local Computer Policy (group policy editor)
[Console Root\Local COmputer POlicy\Copmuter COnfiguration\Windows Settings\Security Settings\Local Policies\User Rights Assignment]
access this computer from the network
adjust memory quotas fro a process
Allow logon on locally
Generate security audit
Impersonate a client after authentication
logon as a batch job
logon as a service
replace a process level token
** Make certain that the domain IUSR account has permissions to the SPIN directory **