The account must be a member of the local IIS_IUSRS group. If you have chosen Kerberos as the authentication type, the account ...