On my server, the IUSR_MYSERVER account has write access to some directories. I know this because if you check effective permissions, it says it can "Create Files / Write Data" and "Create Folders / Append Data". The trouble is, if I go look at permissions that are defined, the IUSR_MYSERVER account only had Read & Execute permissions, and nothing more.
This account isn't a member of any groups. What are some things I can check to determine how this account has access to write to files?
Edit: Here is a list of permissions defined for the directory:
Allow Domain Users (MYDOMAIN\Domain Users) Read & Execute Allow CMS Account (Specific account from our CMS that uploads content) Modify Allow Internet Guest Account (MYSERVER\IUSER_MYSERVER) Read & Execute Allow Launch IIS Process Account (MYSERVER\IWAM_MYSERVER) Read & Execute Allow Web Group (MYDOMAIN\Web Group) (This is a group of users who work on the website) Modify Allow Administrators (MYSERVER\Administrators) Full Control Allow CREATOR OWNER Full Control Allow SYSTEM Full Control Allow Users (MYSERVER\Users) Special (Allowed: Traverse Folder / Execute File, List Folder / Read Data, Read Attributes, Read Extended Attributes, Create Files / Write Data, Create Folders / Append Data, Read Permissions Denied: None) Allow users (MYSERVER\Users) Read & Execute