Can someone explain me what these 2 accounts are used for?
I know that the application pool account controls the permission that apply to .NET code of a website.
If this account has no write permission to a directory then you can't create files for example.
However there is one more account IISUSR which is the account for anonymous authentication.
In what way does this account relate to the .NET code and access to a website?
Why do we need 2 accounts?