How to assign IIS_IUSRS

Question

I can not understand this group IIS_IUSRS. As for the asp.net workflow in IIS 7.5, you don't need to allow this group write permissions (web.config, etc.)?

Or is IIS_IUSRS the group that runs the default application pool, and I just need to add some user to this group?

I am trying to get rid of the permission problem along the UNC path where IIS cannot read the web.config file and tried to add IIS_IUSRS to the security tab of the web.config file, but it does not know what IIS_IUSRS is ... when I try to find users to add to The security list of this file in Windows Explorer in Win 7.

Answer 1

IIS_IUSRS similar to the old IIS6 IIS_WPG group. This is a built-in security group configured in such a way that any member of this group can act as an application pool identifier.

For more information see

Understanding Built-in User and Group Accounts in IIS 7

Answer 2

I decided the solution for this, just go to the application pool and right-click for editing rights, just enter IIS_IUSRS in the sharing options and select the name of your computer and it will automatically create a group.

Answer 3

Yes, this is a group of pool accounts and yes, you must use the IIS_IUSRS ACL. But not for write access, for your application code and web.config you only need to assign read access to it.